last executing test programs: 3.384774494s ago: executing program 0 (id=1789): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2b, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf90}, @ldst={0x0, 0x1, 0x0, 0x6, 0x9, 0x10, 0xffffffffffffffff}, @printk={@u}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ldst={0x0, 0x0, 0x6, 0x0, 0x4, 0x10, 0xffffffffffffffff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000cc0)='syzkaller\x00', 0xfffe000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x2, 0xb, 0xc3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000010c0)=[0xffffffffffffffff], &(0x7f0000001100)=[{0x1, 0x400, 0x4, 0xc}, {0x0, 0x3, 0x5, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xfffffffffffffdd9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0xfffffffffffffc5e, 0xbd, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xc9, 0xffffffff, 0x5, 0x4, 0xffffffffffffffff, 0x10001, '\x00', r2, r3, 0x1, 0x1, 0x0, 0x1}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r4, @ANYBLOB="000200000000000000ffff000000470000eb761d", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="01000000000000000100"/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x5, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x11, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x39}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9ff, 0xe5, &(0x7f0000000b00)=""/229, 0x41000, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x7, 0x1, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r8], &(0x7f0000000c80)=[{0x3, 0x3, 0x9, 0x7}, {0x4, 0x2, 0x1, 0x4}, {0x3, 0x5, 0xa, 0x7}], 0x10, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40100, '\x00', r10, r4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r11}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 2.839724967s ago: executing program 0 (id=1800): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x80) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x12) 2.837106167s ago: executing program 1 (id=1793): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000040), 0x4) 2.53937563s ago: executing program 0 (id=1795): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000004000000850000000e000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/12, @ANYRES32, @ANYBLOB="9b0a3648f06279c502f5b52b9669433ca9ed75964e3be88ba1df5ed719ebd8218ec3cb08514324de23fab4c23500797090249528abca9ec7ac129e97b78c02d0193ee470f06d5acaf50ef7dcb22132b6419a4372a845181afcd6b572a399f6103cea10a0b973dda1f9d854568621a20b49a2e99025d0545e3fca", @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/12, @ANYRES32, @ANYBLOB="9b0a3648f06279c502f5b52b9669433ca9ed75964e3be88ba1df5ed719ebd8218ec3cb08514324de23fab4c23500797090249528abca9ec7ac129e97b78c02d0193ee470f06d5acaf50ef7dcb22132b6419a4372a845181afcd6b572a399f6103cea10a0b973dda1f9d854568621a20b49a2e99025d0545e3fca", @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='afs_reload_dir\x00', r1}, 0x18) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80", 0xb}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80", 0xb}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x8010743f, 0xf0ff1f00000000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) (async) close(0x3) 2.380918817s ago: executing program 1 (id=1796): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8, 0x0, 0x7, 0x0, 0x0, 0x770a}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2", @ANYRES8=r1], 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1400000017000be65f0f42d25a80648c2594f90b", 0x14}], 0x1}, 0x0) 1.84094026s ago: executing program 1 (id=1798): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000d40)={&(0x7f0000000440), &(0x7f0000000e40)=""/147, &(0x7f0000000480)="8a6cd71802a52fc7106077", &(0x7f0000000f00)="1f9efe1d09a4849e2fa26e5495e9191d51357160a070fe6e9450e4167d53d5aadcf0e6e1695ab1d337da0b26e0b5d6177f09878d294ec72e96a19616f5f1b72718543fe105bbfc86726d067cdd5248fb41f04fc5747214d98311daad8ae7a7876a1bf6a1b667f7d1dda8ed7d6d20c4c170b9551efd0770b0ebccb6411f5f05087cd5984339ca0c7ef628a4ea4af4a091e0fa23e9c9c459", 0x783, r1, 0x4}, 0x38) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000005c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x11, &(0x7f0000000c80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @ldst={0x2, 0x1, 0x2, 0x5, 0x7, 0x50, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0xffca468d5a0ae453, 0x1, 0x7, 0xfffffffffffffec0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) recvmsg(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/66, 0x42}], 0x1, &(0x7f0000000dc0)=""/11, 0xb}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @union]}}, 0x0, 0x56}, 0x28) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r4}, 0x8) sendmsg$unix(r6, &(0x7f0000000bc0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000640)="5c1318b7711a312edff80762cd76526af63ff5ff27691f721b68a5525b244be5c45760f932bd352b27ea9475fe89c397307b8ce5d4495516e7f5cc0825dacea95afacaadc99b03088c25e65c369773eef0a912eee2608e334e7ac2385edef8f36cd288d11b7ad75cf22a9831e95454cddc875b58b076a6104a904209570638c35f760b5d46524f709fdba2c686161ced2bd5f64b067f35be1d0b8f1d2974ed22ff7a84f67060d601ac1080f4f67e4efd162f36ba9e99f1534a7c5bad31bba71052ff80524f22675512e1dd80267999e02187a9518afdb9f162f8fb1a10f31de952248c7f6cc84433ba12e337ce9f8076", 0xf0}, {&(0x7f0000000740)="6e2cc41708217c33b7d4985937e8728382302273bae8dc423929d172178578b1a67c48189ca8b661ade636e3a732e75cc1990bda6a0b36d3efefa8ef283ce57960d2f6f155bb8347b555b51bec0ed39cc1b1429a431ed02bb24df15cb788a8d97d86ef2e18d4cad2b38d9e34f30d5add7dafa69c1a25f060fdf65c9bf3833c2fb5bfc865a79d2a2b4636ad94f6304455d9f0c1810549f441c1d4375959f5ac0645460d372cf58386d491ea8c89bde7ab6dbb84ded9fd0a2486e05e7386b16a4be3cf6b0c57e6a3e3a9009964c56d0336f46419319d7982351be098f92a4a192ed1d0bb1beac2265410", 0xe9}, {&(0x7f0000000280)="86b6c8dbc4d4f5f4eef62894cc83d5704f8e6905714181bcaa3366dc1479d7b0921fad34384bfe35ebb51f0a872fe532537a75f0203dc2bbf4a7cc8af6f1c17e989f18c63d4fe2f5286904faafd94f92ea18ce167d72db25f5dd7f55c5d30322c42cce42f74f86113b09b2", 0x6b}, {&(0x7f0000000a40)="091b7c789ffdd197b041222155f206fca4e1b9caa05f4b98b81d0e10db2da029df092b33035a05e7ce19b883ca42bb214242604be3366272f5f48d9232a02ad0fa45c571bc2a2a2346d769fb16fc679ba2e1b454bf5ad0e04915c352dcdfbd6b05d97d33cfd68dce49b72d53bf428264d852e0593a3b675da6c8fe817ed4ccfd5566404dc85be76b0a2a7c2ebb8b8c22195b59a0567774241f2bbac564ecda26e6e1965cad14e14409b412f98545be4071f86fca135f76d1178268bab35ad292c7d5c7c25567d3d13c527f67", 0xcc}, {&(0x7f0000000300)="43d6f58452fbc74043a417cdd6854db06f8aa19f20486a513a09d35721641f0aa3f638e40ea44e8345b60fe007c1b6236553796865153c6fbb668e", 0x3b}, {&(0x7f00000004c0)="6ad434254003effb222df30a6b29ff648f1bd76fbc66317c47db93b055c6c4718813d60d873c128fc5f310c13825ee56ba3163106a7f46c444095864", 0x3c}, {&(0x7f0000000500)="d9e7f5dfece653980e7ddc6cbd8af63a", 0x10}, {&(0x7f0000000940)="58f759695c2e3ce1bf0f61e98e258f6c5c9ff8e6d7104c85346b64dd1db3bd39df00ccd51d89effb30c24e6529adc40b79924b9785a2a24ca8ed107470707c5fc47b735006a79bbd825b", 0x4a}], 0x8, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [r4, r7]}}], 0x18, 0x4000}, 0x44000) 1.662765418s ago: executing program 2 (id=1799): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a86c690cf2723463fbce83146", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 13) 1.249471246s ago: executing program 2 (id=1801): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000600001300080000000100000080000000af4b01a1b091124bed61a6fdb9c8f89a2f65926a4d16407ca66444396bf7d64f673310be92f3ed5d2df5da37abd79cbfb852a789f94acffbe1f9d8ad39662e7d93c0923de3e80cb567ac8cad3524e230d9361341eb2fe3e8e0a6892c5ff4bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000b873000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* rmw'], 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b08d25a806f8c6394f90524fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xd, 0x7, 0x0, 0x9, 0xa0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x2, 0x4}, 0x26, 0x7ff, 0x5, 0x7, 0x81, 0x6, 0x0, 0x0, 0x2, 0x0, 0x2000000e5}, 0x0, 0x9, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000ab9143128c9a49b8000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) close(r9) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x89f2, &(0x7f0000002280)={'macsec0\x00', @random}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) 1.248889856s ago: executing program 3 (id=1802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2b, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf90}, @ldst={0x0, 0x1, 0x0, 0x6, 0x9, 0x10, 0xffffffffffffffff}, @printk={@u}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ldst={0x0, 0x0, 0x6, 0x0, 0x4, 0x10, 0xffffffffffffffff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000cc0)='syzkaller\x00', 0xfffe000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x2, 0xb, 0xc3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000010c0)=[0xffffffffffffffff], &(0x7f0000001100)=[{0x1, 0x400, 0x4, 0xc}, {0x0, 0x3, 0x5, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xfffffffffffffdd9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0xfffffffffffffc5e, 0xbd, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xc9, 0xffffffff, 0x5, 0x4, 0xffffffffffffffff, 0x10001, '\x00', r2, r3, 0x1, 0x1, 0x0, 0x1}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r4, @ANYBLOB="000200000000000000ffff000000470000eb761d", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="01000000000000000100"/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x5, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x11, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x39}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9ff, 0xe5, &(0x7f0000000b00)=""/229, 0x41000, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x7, 0x1, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r8], &(0x7f0000000c80)=[{0x3, 0x3, 0x9, 0x7}, {0x4, 0x2, 0x1, 0x4}, {0x3, 0x5, 0xa, 0x7}], 0x10, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40100, '\x00', r10, r4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r11}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 1.136880941s ago: executing program 3 (id=1803): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0xfffffff8, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000640), &(0x7f00000002c0), 0x700}, 0x20) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x30000001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@ifindex, 0x7, 0x0, 0x24, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r6, r4, 0x24, 0x0, 0x0, @void, @value=r1, @void, @void, r5}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{}, &(0x7f0000000680), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.056839044s ago: executing program 2 (id=1804): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x80) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x12) 996.559177ms ago: executing program 3 (id=1805): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000040), 0x4) 909.6472ms ago: executing program 1 (id=1806): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016", 0x33}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000e7ff009ec200"/33], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x82, &(0x7f0000000000)=r4, 0x8) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x4fe, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x2, 0x8}, 0xc) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xd, &(0x7f0000000100)=""/13, 0x40f00, 0x8, '\x00', r1, 0x0, r4, 0x8, &(0x7f0000000580)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x140bd, r0, 0x6, &(0x7f0000000800)=[r5, r6, r7, r8, r9, 0x1], &(0x7f0000000840)=[{0x2, 0x1, 0xd, 0x8}, {0x5, 0x5, 0x9}, {0x3, 0x3, 0xb, 0xa}, {0x5, 0x1, 0xa, 0x5}, {0x3, 0x4, 0x10, 0x3}, {0x5, 0x5, 0xd, 0x6}], 0x10, 0xfffffffd}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x33fe0) 839.230013ms ago: executing program 2 (id=1807): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85", 0x1}], 0x1}, 0x24004860) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x1, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x81}, 0x0, 0x32, 0x43a1bd73, 0x6, 0x1000000000000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x2408, 0x0, 0x0, 0x7, 0x4, 0x61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xfc, 0x7, 0x0, 0xa76, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffbffff, 0x0, @perf_config_ext={0x1, 0x8}, 0x2019, 0x0, 0x3, 0x1, 0x200000000081, 0x8005, 0x3, 0x0, 0x2cb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='cpu\t&0\x91f\xdbV\xef\xc7\xf0\xc8$\xe1x\xad&&\t') r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x280440, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000440)={'syz_tun\x00', 0x400}) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000004e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f800000000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1}, 0x840) r6 = perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x8, 0xf, 0x0, 0x9, 0x0, 0x1, 0x80018, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000480), 0xc}, 0x4000, 0x3ff, 0x0, 0x0, 0xa7, 0x101, 0x8, 0x0, 0x80, 0x0, 0x131a}, 0xffffffffffffffff, 0x103, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x3, 0x0, 0x0, 0x4, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2}, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r6, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x0) 780.356676ms ago: executing program 0 (id=1808): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0083, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1400000017000be65f0f42d25a80648c2594f90b", 0x14}], 0x1}, 0x0) 730.144788ms ago: executing program 3 (id=1809): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x25a5}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000080)="1cea5df7f3b3948d67e334aff3592247d26b542b37", &(0x7f00000000c0)=""/137, &(0x7f0000000240)="26d99a87a9a090636d0da5e23f9d1f18644c139f27fea27fd653230f8bfe7d2c3fa188ca79536285f5c827e723808bda94b15fc7e156f490920aebabb1729e06208f42cce4f8be06abaec84a4ad2b47cfd1381d092374c91a8ce411ccb8d910cace73ea2ff7957b280c7ea6d06438de1f3aaec04dc46f21debf894c05f867fb893b626f5d71e4bf356f453b94868dbde762d3dac133ea94e3da77e08f3986c1f2c03fba3d1218f3b91e1b5eea3d7815cc02b9fd61fbcb6", &(0x7f0000000380)="9b6c10df3d7b5641731c38560d808dc1364b7f18ea0c89ce15e5344eb6b8a692fd99683f31191d73887eb6b14970146e447552d127f272f12acfc9b5b159cd8db0fe65c7161b72dc2301730430b86505bca372ba8f25ae5aeb5bc98ea2c872024ffcca78de5d8ff0eb6d6793166c4aabf5ae68ab04abb21bf92761807a9ecee5f3fa9f8a266e", 0x9, r1, 0x4}, 0x38) r2 = perf_event_open$cgroup(&(0x7f0000000580)={0x1, 0x80, 0x2, 0xfb, 0x0, 0xb, 0x0, 0xb0c, 0x44, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x4, 0x9d, 0x8, 0x9, 0x4, 0xd, 0xb, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2c0942, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'syzkaller1\x00', 0x600}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='nmi_handler\x00', r5}, 0x18) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x11, &(0x7f0000000140), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x541b, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a86c690cf2723463fbce83146", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 701.736929ms ago: executing program 1 (id=1810): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x1e, 0x4, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x27) (async) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b0041000000000000000200000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000004000000030000000700000000100000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="0100ecff03000000050000000b00"/28], 0x50) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="18a60000560013f16ff28e036afc004a07"], 0xfe33) 621.042793ms ago: executing program 0 (id=1811): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a86c690cf2723463fbce83146", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 14) 577.321815ms ago: executing program 2 (id=1812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2b, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf90}, @ldst={0x0, 0x1, 0x0, 0x6, 0x9, 0x10, 0xffffffffffffffff}, @printk={@u}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ldst={0x0, 0x0, 0x6, 0x0, 0x4, 0x10, 0xffffffffffffffff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000cc0)='syzkaller\x00', 0xfffe000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x2, 0xb, 0xc3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000010c0)=[0xffffffffffffffff], &(0x7f0000001100)=[{0x1, 0x400, 0x4, 0xc}, {0x0, 0x3, 0x5, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xfffffffffffffdd9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0xfffffffffffffc5e, 0xbd, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xc9, 0xffffffff, 0x5, 0x4, 0xffffffffffffffff, 0x10001, '\x00', r2, r3, 0x1, 0x1, 0x0, 0x1}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r4, @ANYBLOB="000200000000000000ffff000000470000eb761d", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="01000000000000000100"/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x5, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x11, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x39}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9ff, 0xe5, &(0x7f0000000b00)=""/229, 0x41000, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x7, 0x1, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r8], &(0x7f0000000c80)=[{0x3, 0x3, 0x9, 0x7}, {0x4, 0x2, 0x1, 0x4}, {0x3, 0x5, 0xa, 0x7}], 0x10, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40100, '\x00', r10, r4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r11}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 471.425379ms ago: executing program 1 (id=1813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000600001300080000000100000080000000af4b01a1b091124bed61a6fdb9c8f89a2f65926a4d16407ca66444396bf7d64f673310be92f3ed5d2df5da37abd79cbfb852a789f94acffbe1f9d8ad39662e7d93c0923de3e80cb567ac8cad3524e230d9361341eb2fe3e8e0a6892c5ff4bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000b873000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* rmw'], 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b08d25a806f8c6394f90524fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xd, 0x7, 0x0, 0x9, 0xa0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x2, 0x4}, 0x26, 0x7ff, 0x5, 0x7, 0x81, 0x6, 0x0, 0x0, 0x2, 0x0, 0x2000000e5}, 0x0, 0x9, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000ab9143128c9a49b8000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) close(r9) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x89f2, &(0x7f0000002280)={'macsec0\x00', @random}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) 471.26649ms ago: executing program 3 (id=1814): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_devices(r1, 0x0, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}], &(0x7f0000000000)='GPL\x00', 0xfffffffd}, 0x94) 116.698934ms ago: executing program 0 (id=1815): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x80) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x12) 106.674685ms ago: executing program 3 (id=1816): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x80, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 0s ago: executing program 2 (id=1817): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): [ T7760] validate_nla: 1 callbacks suppressed [ 180.340359][ T7760] netlink: 'syz.1.562': attribute type 11 has an invalid length. [ 180.370850][ T7760] netlink: 168 bytes leftover after parsing attributes in process `syz.1.562'. [ 180.439097][ T7759] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.561'. [ 180.576025][ T5103] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 180.585485][ T7777] netlink: 'syz.2.566': attribute type 28 has an invalid length. [ 180.610271][ T7777] netlink: 'syz.2.566': attribute type 3 has an invalid length. [ 180.617981][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.566'. [ 180.873229][ T5103] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 181.341949][ T7807] netlink: 'syz.3.577': attribute type 3 has an invalid length. [ 181.358872][ T7803] bond_slave_1: mtu less than device minimum [ 181.368478][ T7803] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.574'. [ 181.379608][ T7807] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.577'. [ 181.391852][ T7803] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.574'. [ 181.563828][ T7811] netlink: 'syz.2.579': attribute type 33 has an invalid length. [ 181.580087][ T7811] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.579'. [ 181.629470][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 181.955360][ T7828] netlink: 'syz.1.585': attribute type 9 has an invalid length. [ 181.996143][ T5103] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 182.074258][ T7832] bond_slave_1: mtu less than device minimum [ 182.231704][ T7828] netlink: 'syz.1.585': attribute type 3 has an invalid length. [ 182.472161][ T7828] netlink: 'syz.1.585': attribute type 9 has an invalid length. [ 182.828222][ T7827] delete_channel: no stack [ 183.559794][ T7865] netlink: 'syz.2.597': attribute type 27 has an invalid length. [ 183.632971][ T7867] bond_slave_1: mtu less than device minimum [ 183.764944][ T5103] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 183.943695][ T7869] netlink: 'syz.2.599': attribute type 9 has an invalid length. [ 184.048657][ T7872] team0: Port device netdevsim0 added [ 184.243726][ T7881] IPv6: pim6reg1: Disabled Multicast RS [ 184.420436][ T7884] hsr0: VLAN not yet supported [ 184.703376][ T5103] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 184.738538][ T7902] bond_slave_1: mtu less than device minimum [ 184.774555][ T7902] __nla_validate_parse: 8 callbacks suppressed [ 184.774572][ T7902] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.609'. [ 184.811736][ T7902] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.609'. [ 185.234224][ T7931] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.615'. [ 185.465231][ T5103] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 185.572504][ T7940] bond_slave_1: mtu less than device minimum [ 185.618293][ T7940] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.622'. [ 185.632431][ T7940] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.622'. [ 185.668962][ T7935] wg2: entered promiscuous mode [ 185.680311][ T7935] wg2: entered allmulticast mode [ 185.764197][ T7944] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.797695][ T7946] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.624'. [ 185.809864][ T7946] openvswitch: netlink: Key type 4112 is out of range max 32 [ 186.613815][ T7961] validate_nla: 2 callbacks suppressed [ 186.613884][ T7961] netlink: 'syz.1.629': attribute type 39 has an invalid length. [ 187.080657][ T7971] bond_slave_1: mtu less than device minimum [ 187.103423][ T7971] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.632'. [ 187.130467][ T7971] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.632'. [ 187.130576][ T5103] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 187.321234][ T7975] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.633'. [ 187.632937][ T7982] netlink: 'syz.2.635': attribute type 3 has an invalid length. [ 187.665019][ T7982] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.635'. [ 188.717297][ T7999] bond_slave_1: mtu less than device minimum [ 189.170957][ T5103] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 189.683823][ T8025] sock: sock_timestamping_bind_phc: sock not bind to device [ 190.049848][ T8033] __nla_validate_parse: 4 callbacks suppressed [ 190.049868][ T8033] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.654'. [ 190.098466][ T8033] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.654'. [ 190.337646][ T8042] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.666'. [ 190.368477][ T8042] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.666'. [ 190.741177][ T8054] netlink: 128 bytes leftover after parsing attributes in process `syz.1.661'. [ 191.936656][ T8083] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.669'. [ 192.150474][ T8083] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.669'. [ 194.164489][ T8114] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.678'. [ 194.193530][ T8114] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.678'. [ 194.426727][ T8126] netlink: 'syz.2.681': attribute type 3 has an invalid length. [ 194.459439][ T8126] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.681'. [ 194.543620][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550036][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.045502][ T8139] netlink: 'syz.2.687': attribute type 11 has an invalid length. [ 195.079707][ T8143] netlink: 'syz.0.686': attribute type 29 has an invalid length. [ 195.125954][ T8143] netlink: 'syz.0.686': attribute type 3 has an invalid length. [ 195.181990][ T8143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.686'. [ 195.729605][ T8152] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.690'. [ 195.787735][ T8152] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.690'. [ 196.067075][ T8159] netlink: 10 bytes leftover after parsing attributes in process `syz.0.692'. [ 196.120670][ T8158] netlink: 10 bytes leftover after parsing attributes in process `syz.0.692'. [ 197.521530][ T8182] macsec0: entered promiscuous mode [ 197.547870][ T8182] macsec0: entered allmulticast mode [ 197.560987][ T8182] veth1_macvtap: entered allmulticast mode [ 197.781104][ T8193] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.702'. [ 197.791380][ T8193] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.702'. [ 198.273516][ T8202] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.705'. [ 198.306185][ T8201] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.705'. [ 198.493583][ T8208] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.708'. [ 198.638582][ T8216] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 198.653831][ T8219] netlink: 'syz.2.709': attribute type 4 has an invalid length. [ 198.671493][ T8216] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 199.883445][ T8239] netlink: 'syz.2.723': attribute type 39 has an invalid length. [ 200.791483][ T8248] __nla_validate_parse: 3 callbacks suppressed [ 200.791500][ T8248] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.718'. [ 200.829117][ T8248] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.718'. [ 201.768843][ T8261] can: request_module (can-proto-0) failed. [ 202.077716][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 202.083873][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 202.083889][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 202.089956][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 203.530879][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.726'. [ 204.027302][ T8289] netlink: 'syz.3.733': attribute type 10 has an invalid length. [ 204.225413][ T8289] team0: Port device netdevsim0 added [ 204.425517][ T8303] C: renamed from team_slave_0 (while UP) [ 204.440611][ T8303] netlink: 'syz.3.738': attribute type 2 has an invalid length. [ 204.477179][ T8303] netlink: 116 bytes leftover after parsing attributes in process `syz.3.738'. [ 204.570607][ T8303] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.375337][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 206.295128][ T8364] netlink: 'syz.3.755': attribute type 25 has an invalid length. [ 206.334299][ T8364] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 206.352946][ T8364] bridge0: port 1(bridge_slave_0) entered learning state [ 206.373842][ T8371] netlink: 'syz.0.757': attribute type 21 has an invalid length. [ 206.462259][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 207.181186][ T8400] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 207.208559][ T8399] netlink: 'syz.1.768': attribute type 10 has an invalid length. [ 207.220558][ T8399] netlink: 152 bytes leftover after parsing attributes in process `syz.1.768'. [ 207.343434][ T8404] netlink: 'syz.1.768': attribute type 27 has an invalid length. [ 207.364734][ T8404] netlink: 164 bytes leftover after parsing attributes in process `syz.1.768'. [ 207.520958][ T8405] netlink: 168 bytes leftover after parsing attributes in process `syz.1.768'. [ 207.685794][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 208.645014][ T8438] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.780'. [ 208.677114][ T8440] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.781'. [ 208.692762][ T8438] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 208.813740][ T8438] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 208.825304][ T8438] netlink: 142168 bytes leftover after parsing attributes in process `syz.2.780'. [ 208.903541][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 209.237447][ T8424] delete_channel: no stack [ 209.841097][ T8466] pim6reg1: entered allmulticast mode [ 209.853116][ T8468] netlink: 14 bytes leftover after parsing attributes in process `syz.0.791'. [ 209.901640][ T8468] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 209.909387][ T8468] netlink: 116 bytes leftover after parsing attributes in process `syz.0.791'. [ 209.940454][ T8468] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.010670][ T8468] netlink: 14 bytes leftover after parsing attributes in process `syz.0.791'. [ 210.292543][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 210.345960][ T8481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.796'. [ 213.323334][ T8507] netlink: 'syz.2.803': attribute type 10 has an invalid length. [ 213.552356][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 216.705885][ T8548] __nla_validate_parse: 1 callbacks suppressed [ 216.705903][ T8548] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.818'. [ 216.741684][ T8552] netlink: 763 bytes leftover after parsing attributes in process `syz.2.820'. [ 216.903295][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 216.919454][ T8562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.823'. [ 216.964668][ T8562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.823'. [ 216.975430][ T8562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.823'. [ 216.986995][ T8562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.823'. [ 217.176429][ T8574] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 217.198387][ T8574] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.826'. [ 217.361630][ T8584] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.830'. [ 217.484790][ T8592] veth0_vlan: entered allmulticast mode [ 217.616644][ T8592] veth0_vlan: left promiscuous mode [ 217.654663][ T8592] veth0_vlan: entered promiscuous mode [ 217.693599][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 217.709899][ T8594] netlink: 'syz.0.831': attribute type 7 has an invalid length. [ 217.756868][ T8594] netlink: 140 bytes leftover after parsing attributes in process `syz.0.831'. [ 218.298159][ T8630] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.843'. [ 218.478737][ T8632] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 218.544262][ T8632] hsr_slave_0 (unregistering): left promiscuous mode [ 218.691664][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 219.137527][ T8669] netlink: 'syz.2.854': attribute type 58 has an invalid length. [ 219.273727][ T8674] netlink: 'syz.1.857': attribute type 4 has an invalid length. [ 219.612365][ T8674] netlink: 'syz.1.857': attribute type 4 has an invalid length. [ 219.720712][ T8672] delete_channel: no stack [ 219.736643][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 219.852320][ T8683] netlink: 'syz.3.861': attribute type 10 has an invalid length. [ 219.880647][ T8683] team0: Device ip6_vti0 is of different type [ 219.986328][ T8688] netlink: 'syz.3.861': attribute type 10 has an invalid length. [ 220.027962][ T8688] team0: Device ip6_vti0 is of different type [ 221.094568][ T8730] IPv6: Can't replace route, no match found [ 221.151061][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 221.737966][ T8749] netlink: 'syz.0.878': attribute type 21 has an invalid length. [ 221.754235][ T8749] netlink: 'syz.0.878': attribute type 30 has an invalid length. [ 221.767192][ T8749] __nla_validate_parse: 7 callbacks suppressed [ 221.767210][ T8749] netlink: 196 bytes leftover after parsing attributes in process `syz.0.878'. [ 222.267740][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 222.691354][ T8781] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 222.722335][ T8781] netlink: 'syz.1.888': attribute type 3 has an invalid length. [ 222.749961][ T8781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.888'. [ 222.862096][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.890'. [ 223.439301][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 223.689633][ T8800] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 223.709082][ T8800] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.895'. [ 223.719818][ T8803] C: renamed from team_slave_0 [ 223.730475][ T8803] netlink: 'syz.1.897': attribute type 4 has an invalid length. [ 223.738696][ T8803] netlink: 116 bytes leftover after parsing attributes in process `syz.1.897'. [ 223.756390][ T8803] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 224.013435][ T8814] ÿ: renamed from bond_slave_0 (while UP) [ 224.239589][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 224.435845][ T8832] netlink: 703 bytes leftover after parsing attributes in process `syz.0.908'. [ 225.010933][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 225.742877][ T8863] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.920'. [ 225.806872][ T8866] pim6reg1: entered promiscuous mode [ 225.841628][ T8866] pim6reg1: entered allmulticast mode [ 226.054262][ T8873] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.923'. [ 226.085025][ T8873] netlink: zone id is out of range [ 226.110876][ T8873] netlink: zone id is out of range [ 226.116171][ T8873] netlink: zone id is out of range [ 226.141606][ T8873] netlink: del zone limit has 8 unknown bytes [ 226.462228][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 227.100955][ T8897] netlink: 'syz.1.925': attribute type 10 has an invalid length. [ 227.147145][ T8897] netlink: 152 bytes leftover after parsing attributes in process `syz.1.925'. [ 227.191684][ T8897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 227.285719][ T8899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.932'. [ 227.305576][ T8902] netlink: 'syz.2.932': attribute type 10 has an invalid length. [ 227.321946][ T8902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.932'. [ 227.356525][ T8902] dummy0: entered promiscuous mode [ 227.367288][ T8904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.933'. [ 227.380390][ T8904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.933'. [ 227.398272][ T8903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.933'. [ 228.010678][ T8916] netlink: 188 bytes leftover after parsing attributes in process `syz.0.938'. [ 228.020031][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 228.294714][ T8925] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.941'. [ 228.351002][ T8925] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.716631][ T8938] netlink: 'syz.2.945': attribute type 3 has an invalid length. [ 228.767536][ T8938] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.945'. [ 228.878107][ T8943] netlink: 140 bytes leftover after parsing attributes in process `syz.1.946'. [ 229.801004][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 230.135663][ T8975] netlink: 'syz.2.956': attribute type 29 has an invalid length. [ 230.200536][ T8975] netlink: 'syz.2.956': attribute type 29 has an invalid length. [ 231.069866][ T8990] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 231.229633][ T8997] netlink: 'syz.2.963': attribute type 22 has an invalid length. [ 231.259259][ T9000] netlink: 'syz.2.963': attribute type 22 has an invalid length. [ 231.391013][ T9001] veth1_macvtap: left promiscuous mode [ 231.410380][ T9001] macsec0: entered promiscuous mode [ 231.974870][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 232.289539][ T9020] __nla_validate_parse: 4 callbacks suppressed [ 232.289559][ T9020] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.970'. [ 232.415046][ T9022] netlink: 'syz.2.971': attribute type 5 has an invalid length. [ 232.471911][ T9022] netlink: 'syz.2.971': attribute type 9 has an invalid length. [ 232.479636][ T9022] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.971'. [ 232.515662][ T9025] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.972'. [ 232.575232][ T9025] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.972'. [ 232.682403][ T9027] netlink: 'syz.3.973': attribute type 10 has an invalid length. [ 232.700429][ T9027] netlink: 152 bytes leftover after parsing attributes in process `syz.3.973'. [ 233.139323][ T9043] netlink: 'syz.3.979': attribute type 10 has an invalid length. [ 233.147462][ T9043] netlink: 156 bytes leftover after parsing attributes in process `syz.3.979'. [ 233.260770][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 233.597771][ T9049] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.982'. [ 233.907806][ T9056] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.984'. [ 233.953391][ T9056] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.984'. [ 234.164509][ T9060] validate_nla: 1 callbacks suppressed [ 234.164529][ T9060] netlink: 'syz.2.986': attribute type 7 has an invalid length. [ 234.473530][ T9071] netlink: 'syz.1.989': attribute type 3 has an invalid length. [ 234.500241][ T9071] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 234.541413][ T9071] netlink: 116 bytes leftover after parsing attributes in process `syz.1.989'. [ 234.983603][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 236.876585][ T9096] netlink: 'syz.2.996': attribute type 10 has an invalid length. [ 236.894851][ T9096] netlink: 'syz.2.996': attribute type 16 has an invalid length. [ 236.971529][ T9099] netlink: 'syz.3.998': attribute type 3 has an invalid length. [ 236.982255][ T9100] netlink: 'syz.3.998': attribute type 3 has an invalid length. [ 237.083543][ T9103] netlink: 'syz.2.999': attribute type 21 has an invalid length. [ 237.098971][ T9103] netlink: 'syz.2.999': attribute type 6 has an invalid length. [ 237.198753][ T9112] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 237.226977][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 237.381891][ T9112] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.398581][ T9112] bond0: (slave team0): Enslaving as an active interface with an up link [ 237.622279][ T9118] __nla_validate_parse: 7 callbacks suppressed [ 237.622297][ T9118] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1004'. [ 237.721606][ T9123] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1006'. [ 237.731550][ T9123] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1006'. [ 238.105797][ T9142] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1011'. [ 239.146469][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 239.248422][ T9160] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1017'. [ 239.268355][ T9160] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1017'. [ 239.365776][ T9163] syz.1.1019[9163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.365899][ T9163] syz.1.1019[9163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.464767][ T9171] pim6reg1: entered promiscuous mode [ 239.553560][ T9171] pim6reg1: entered allmulticast mode [ 239.678214][ T9181] netlink: 142556 bytes leftover after parsing attributes in process `syz.1.1022'. [ 239.687733][ T9181] validate_nla: 2 callbacks suppressed [ 239.687745][ T9181] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 239.702837][ T9181] netlink: 'syz.1.1022': attribute type 2 has an invalid length. [ 239.716265][ T9181] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 239.725966][ T9181] netlink: 'syz.1.1022': attribute type 4 has an invalid length. [ 239.823071][ T9183] delete_channel: no stack [ 239.827681][ T9183] delete_channel: no stack [ 239.871301][ T9183] netlink: 'syz.2.1023': attribute type 10 has an invalid length. [ 239.967766][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.983881][ T9183] bond0: (slave team0): Enslaving as an active interface with an up link [ 240.091698][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 240.226059][ T9205] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1030'. [ 240.243460][ T9205] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1030'. [ 240.736085][ T9235] netlink: 'syz.2.1040': attribute type 23 has an invalid length. [ 240.738109][ T9237] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1041'. [ 240.875224][ T9235] netlink: 'syz.2.1040': attribute type 27 has an invalid length. [ 240.885707][ T9235] netlink: 'syz.2.1040': attribute type 4 has an invalid length. [ 240.970580][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 241.302735][ T9251] netlink: 'syz.1.1046': attribute type 10 has an invalid length. [ 241.325991][ T9251] bond0: (slave 77ÿ): Releasing backup interface [ 242.343627][ T9274] bridge0: entered promiscuous mode [ 242.356595][ T9274] bridge0: entered allmulticast mode [ 242.385351][ T9276] netlink: 'syz.1.1054': attribute type 7 has an invalid length. [ 242.574360][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 242.763619][ T9290] __nla_validate_parse: 4 callbacks suppressed [ 242.763634][ T9290] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1059'. [ 242.791637][ T9290] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1059'. [ 242.991071][ T9292] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1060'. [ 243.007226][ T9298] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1061'. [ 243.971459][ T9297] veth0_vlan: entered allmulticast mode [ 244.262777][ T9299] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1061'. [ 244.352389][ T9300] veth0_vlan: left promiscuous mode [ 244.359906][ T9300] veth0_vlan: entered promiscuous mode [ 244.871753][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 244.920210][ T9335] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1070'. [ 244.965635][ T9335] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1070'. [ 245.238588][ T9342] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1072'. [ 245.438864][ T9345] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1074'. [ 245.491630][ T9344] validate_nla: 2 callbacks suppressed [ 245.491661][ T9344] netlink: 'syz.0.1074': attribute type 2 has an invalid length. [ 245.511422][ T9344] netlink: 'syz.0.1074': attribute type 8 has an invalid length. [ 245.547252][ T9344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1074'. [ 245.820595][ T9358] netlink: 'syz.3.1079': attribute type 10 has an invalid length. [ 245.855366][ T9358] batman_adv: batadv0: Adding interface: team0 [ 245.870489][ T9358] batman_adv: batadv0: The MTU of interface team0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.947473][ T9358] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 245.976938][ T9363] netlink: 'syz.3.1079': attribute type 10 has an invalid length. [ 245.985369][ T9363] team0: entered promiscuous mode [ 245.990701][ T9363] C: entered promiscuous mode [ 245.995648][ T9363] team_slave_1: entered promiscuous mode [ 246.002066][ T9363] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 246.024341][ T9363] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.034046][ T9363] batman_adv: batadv0: Interface activated: team0 [ 246.045851][ T9363] batman_adv: batadv0: Interface deactivated: team0 [ 246.050072][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 246.054314][ T9363] batman_adv: batadv0: Removing interface: team0 [ 246.072300][ T9363] bridge0: port 3(team0) entered blocking state [ 246.078876][ T9363] bridge0: port 3(team0) entered disabled state [ 246.087267][ T9363] team0: entered allmulticast mode [ 246.093389][ T9363] C: entered allmulticast mode [ 246.098245][ T9363] team_slave_1: entered allmulticast mode [ 246.104535][ T9363] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 246.116693][ T9363] bridge0: port 3(team0) entered blocking state [ 246.123263][ T9363] bridge0: port 3(team0) entered forwarding state [ 246.406275][ T9370] delete_channel: no stack [ 246.687222][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 248.077717][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 248.768537][ T9432] __nla_validate_parse: 6 callbacks suppressed [ 248.768554][ T9432] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1104'. [ 248.812082][ T9432] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1104'. [ 249.273986][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 251.353242][ T9467] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1116'. [ 251.378850][ T9467] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1116'. [ 251.464644][ T9471] netlink: 'syz.1.1118': attribute type 21 has an invalid length. [ 251.855665][ T9492] tap0: tun_chr_ioctl cmd 21731 [ 251.929592][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 252.123824][ T9507] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1127'. [ 252.141388][ T9507] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1127'. [ 252.382552][ T9515] wg2: left promiscuous mode [ 252.387250][ T9515] wg2: left allmulticast mode [ 252.507379][ T9515] wg2: entered promiscuous mode [ 252.528261][ T9515] wg2: entered allmulticast mode [ 253.047743][ T9534] netlink: 18187 bytes leftover after parsing attributes in process `syz.0.1136'. [ 253.168128][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 253.275336][ T9543] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1139'. [ 253.307179][ T9543] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1139'. [ 254.257233][ T9571] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1149'. [ 254.266566][ T9571] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1149'. [ 254.545175][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 254.767910][ T9579] netlink: 'syz.2.1153': attribute type 6 has an invalid length. [ 254.804737][ T9580] netlink: 'syz.2.1153': attribute type 6 has an invalid length. [ 254.981756][ T9595] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1158'. [ 254.995159][ T9595] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1158'. [ 255.045041][ T9593] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 255.106487][ T9593] batman_adv: batadv0: Adding interface: team0 [ 255.146075][ T9593] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.184017][ T9593] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 255.302860][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 255.435552][ T9610] syzkaller0: entered promiscuous mode [ 255.460410][ T9610] syzkaller0: entered allmulticast mode [ 255.602272][ T9610] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1163'. [ 255.978416][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.985079][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.492643][ T9629] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1169'. [ 256.540609][ T9629] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1169'. [ 258.341446][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 258.698474][ T9659] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1180'. [ 258.715664][ T9660] netlink: 'syz.2.1179': attribute type 39 has an invalid length. [ 258.769081][ T9659] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1180'. [ 258.998557][ T9675] netlink: 'syz.0.1185': attribute type 10 has an invalid length. [ 259.324984][ T9681] netlink: 'syz.0.1185': attribute type 29 has an invalid length. [ 259.369365][ T9681] netlink: 'syz.0.1185': attribute type 29 has an invalid length. [ 259.543365][ T9687] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 259.563609][ T9687] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1189'. [ 259.590376][ T9687] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1189'. [ 259.669935][ T9693] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1192'. [ 259.713294][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 259.728428][ T9693] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1192'. [ 259.989931][ T9700] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1194'. [ 260.084680][ T9702] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1195'. [ 260.148124][ T9705] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1195'. [ 260.157603][ T9705] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1195'. [ 260.167838][ T9702] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1195'. [ 260.178098][ T9705] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1195'. [ 260.480495][ T9718] openvswitch: netlink: Tunnel attr 0 has unexpected len 145 expected 8 [ 260.906356][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 261.281703][ T9742] netlink: 'syz.3.1209': attribute type 21 has an invalid length. [ 261.320736][ T9742] netlink: 'syz.3.1209': attribute type 6 has an invalid length. [ 261.950951][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 262.745198][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 262.807682][ T9802] openvswitch: netlink: IP tunnel dst address not specified [ 263.540685][ T5792] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 264.156659][ T5792] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 264.347512][ T9869] netlink: 'syz.3.1258': attribute type 10 has an invalid length. [ 264.419870][ T9869] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 264.434692][ T9874] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 264.443718][ T9874] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 264.467863][ T9874] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 264.494567][ T9874] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 264.612520][ T9882] __nla_validate_parse: 19 callbacks suppressed [ 264.612539][ T9882] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1262'. [ 264.640774][ T9882] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1262'. [ 264.676615][ T9886] sit0: entered promiscuous mode [ 264.684001][ T9886] sit0: entered allmulticast mode [ 264.714271][ T9886] netlink: 'syz.2.1263': attribute type 27 has an invalid length. [ 264.733119][ T9886] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1263'. [ 264.903382][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 264.998391][ T9895] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1267'. [ 265.196812][ T9906] netlink: 'syz.0.1270': attribute type 10 has an invalid length. [ 265.223018][ T9909] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1272'. [ 265.233822][ T9906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1270'. [ 265.249258][ T9906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.280479][ T9909] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1272'. [ 265.294209][ T9917] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1273'. [ 265.574335][ T5792] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 265.963449][ T9947] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1284'. [ 265.981337][ T9947] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1284'. [ 266.640049][ T5792] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 269.492391][ T9979] IPv6: Can't replace route, no match found [ 269.536596][ T9979] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 269.563531][ T9979] netlink: 'syz.1.1293': attribute type 21 has an invalid length. [ 269.723212][ T9997] __nla_validate_parse: 3 callbacks suppressed [ 269.723226][ T9997] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1299'. [ 269.748331][ T9997] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1299'. [ 269.765569][ T9998] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1299'. [ 269.796303][ T9997] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1299'. [ 269.815616][T10005] netlink: 'syz.2.1302': attribute type 23 has an invalid length. [ 269.828846][T10005] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 269.846281][ T9997] netlink: 'syz.0.1299': attribute type 21 has an invalid length. [ 269.855596][ T9997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1299'. [ 269.865440][ T9997] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 270.001751][T10011] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1305'. [ 270.011484][T10011] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1305'. [ 270.487775][T10028] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1311'. [ 270.515907][T10028] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 270.694125][T10042] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1315'. [ 270.717665][T10042] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1315'. [ 271.609368][T10086] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 271.642060][T10086] dummy0: entered promiscuous mode [ 271.648574][T10086] bridge0: port 4(dummy0) entered blocking state [ 271.666031][T10086] bridge0: port 4(dummy0) entered disabled state [ 271.681192][T10086] dummy0: entered allmulticast mode [ 271.689640][T10086] bridge0: port 4(dummy0) entered blocking state [ 271.696378][T10086] bridge0: port 4(dummy0) entered forwarding state [ 271.868003][T10097] netlink: 'syz.2.1334': attribute type 10 has an invalid length. [ 272.359595][T10118] netlink: 'syz.1.1343': attribute type 10 has an invalid length. [ 274.879864][T10184] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 274.942927][T10181] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 275.000241][T10181] __nla_validate_parse: 16 callbacks suppressed [ 275.000256][T10181] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1365'. [ 275.120410][T10184] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1365'. [ 275.401341][T10254] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1369'. [ 275.508438][T10254] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1369'. [ 275.936828][T10273] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1372'. [ 277.431385][T10280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1377'. [ 277.616145][T10289] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1380'. [ 277.636578][T10289] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1380'. [ 278.019904][T10312] netlink: 'syz.3.1387': attribute type 21 has an invalid length. [ 278.040321][T10312] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1387'. [ 278.044309][T10313] netlink: 'syz.3.1387': attribute type 28 has an invalid length. [ 278.086123][T10313] netlink: 'syz.3.1387': attribute type 3 has an invalid length. [ 278.094473][T10313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1387'. [ 279.176105][T10332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.497227][T10377] __nla_validate_parse: 6 callbacks suppressed [ 280.497244][T10377] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1412'. [ 280.529452][T10377] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1412'. [ 280.679152][T10385] netlink: 'syz.1.1416': attribute type 5 has an invalid length. [ 281.113864][T10396] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1420'. [ 281.415790][T10407] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1424'. [ 281.438855][T10407] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1424'. [ 282.292167][T10437] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1434'. [ 282.301862][T10437] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1434'. [ 282.773250][T10455] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.1441'. [ 282.882197][T10455] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1441'. [ 283.445877][T10471] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1446'. [ 283.761888][T10496] netlink: 'syz.2.1454': attribute type 27 has an invalid length. [ 284.992129][T10529] netlink: 'syz.2.1467': attribute type 33 has an invalid length. [ 285.003069][T10532] netlink: 'syz.0.1465': attribute type 1 has an invalid length. [ 285.011314][T10532] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.781412][T10549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.345332][T10573] __nla_validate_parse: 7 callbacks suppressed [ 286.345349][T10573] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1478'. [ 286.562947][T10575] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1479'. [ 286.579642][T10575] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1479'. [ 287.068734][T10589] netlink: 'syz.0.1485': attribute type 9 has an invalid length. [ 287.079073][T10589] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1485'. [ 287.304958][T10595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1488'. [ 287.396505][T10599] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1490'. [ 287.410314][T10599] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1490'. [ 288.438762][T10618] syz.3.1497[10618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.438894][T10618] syz.3.1497[10618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.533312][T10618] netlink: 'syz.3.1497': attribute type 10 has an invalid length. [ 288.570296][T10618] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 288.600931][T10622] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1497'. [ 288.712144][T10626] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1500'. [ 288.750497][T10626] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1500'. [ 289.016450][ T5792] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 289.167760][T10644] cgroup: fork rejected by pids controller in /syz3 [ 289.521646][T10709] netlink: 'syz.0.1510': attribute type 5 has an invalid length. [ 289.563100][T10709] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 290.007884][T10763] bridge0: port 4(ip6gretap0) entered blocking state [ 290.030951][T10763] bridge0: port 4(ip6gretap0) entered disabled state [ 290.052306][T10763] ip6gretap0: entered allmulticast mode [ 290.081420][T10763] ip6gretap0: entered promiscuous mode [ 290.423938][T10234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.542679][T10234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.659670][T10234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.732552][T10781] netlink: 'syz.2.1522': attribute type 10 has an invalid length. [ 290.876247][T10234] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 290.888258][T10234] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 290.915704][T10234] team0: Port device netdevsim0 removed [ 290.924315][T10234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.189016][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.200619][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.208967][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.219605][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.241051][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.248804][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.353754][T10796] __nla_validate_parse: 2 callbacks suppressed [ 291.353772][T10796] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1526'. [ 291.792856][T10793] chnl_net:caif_netlink_parms(): no params data found [ 291.964338][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.972975][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.986142][T10793] bridge_slave_0: entered allmulticast mode [ 291.994171][T10793] bridge_slave_0: entered promiscuous mode [ 292.006568][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.014018][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.021960][T10793] bridge_slave_1: entered allmulticast mode [ 292.042451][T10793] bridge_slave_1: entered promiscuous mode [ 292.092933][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.106027][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.214815][T10793] team0: Port device team_slave_0 added [ 292.231048][T10793] team0: Port device team_slave_1 added [ 292.231075][T10828] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1532'. [ 292.246567][T10822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1532'. [ 292.274175][T10822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1532'. [ 292.289767][T10829] tun0: tun_chr_ioctl cmd 1074025677 [ 292.299849][T10829] tun0: linktype set to 776 [ 292.340050][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.349659][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.393636][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.425745][T10825] netlink: 'syz.1.1534': attribute type 3 has an invalid length. [ 292.431049][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.445267][T10825] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 292.449829][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.460237][T10825] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1534'. [ 292.480386][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.599579][T10793] hsr_slave_0: entered promiscuous mode [ 292.618421][T10793] hsr_slave_1: entered promiscuous mode [ 292.633908][T10793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.649024][T10793] Cannot create hsr debugfs directory [ 292.880344][T10845] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1539'. [ 293.340432][ T5792] Bluetooth: hci3: command tx timeout [ 293.688115][T10793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.725042][T10793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.742148][T10793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.898445][T10793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.907413][T10859] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1545'. [ 293.990819][T10861] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 294.030037][T10861] team0: Port device wlan1 added [ 294.121994][T10860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.828301][T10884] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1551'. [ 294.903550][T10884] netlink: 'syz.2.1551': attribute type 10 has an invalid length. [ 294.914941][T10884] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.999220][T10890] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1551'. [ 295.020023][T10884] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1551'. [ 295.085440][T10234] bond0: (slave wlan1): Releasing backup interface [ 295.277976][T10793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.320636][T10234] hsr_slave_0: left promiscuous mode [ 295.336985][T10234] hsr_slave_1: left promiscuous mode [ 295.355241][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.367327][T10234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.376757][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.395827][T10234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.406875][T10234] dummy0: left allmulticast mode [ 295.415405][T10234] bridge0: port 4(dummy0) entered disabled state [ 295.423515][ T5792] Bluetooth: hci3: command tx timeout [ 295.431508][T10234] team0: left allmulticast mode [ 295.436404][T10234] C: left allmulticast mode [ 295.441331][T10234] team_slave_1: left allmulticast mode [ 295.447091][T10234] bridge0: port 3(team0) entered disabled state [ 295.456873][T10234] bridge_slave_1: left allmulticast mode [ 295.464003][T10234] bridge_slave_1: left promiscuous mode [ 295.470994][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.486298][T10234] bridge_slave_0: left allmulticast mode [ 295.492620][T10234] bridge_slave_0: left promiscuous mode [ 295.498450][T10234] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.527398][T10234] veth1_macvtap: left promiscuous mode [ 295.533787][T10234] veth0_macvtap: left promiscuous mode [ 295.539602][T10234] veth1_vlan: left allmulticast mode [ 295.545507][T10234] veth1_vlan: left promiscuous mode [ 295.814600][T10234] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 296.094784][T10234] team_slave_1 (unregistering): left promiscuous mode [ 296.106655][T10234] team0 (unregistering): Port device team_slave_1 removed [ 296.155420][T10234] C (unregistering): left promiscuous mode [ 296.166733][T10234] team0 (unregistering): Port device C removed [ 296.209056][T10234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.249125][T10234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.624328][T10234] bond0 (unregistering): Released all slaves [ 296.759224][T10793] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.845206][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.852544][T10238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.910977][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.918180][T10238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.407005][ T5792] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 297.494871][ T5792] Bluetooth: hci3: command tx timeout [ 297.544522][T10793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.681095][T10793] veth0_vlan: entered promiscuous mode [ 297.698691][T10793] veth1_vlan: entered promiscuous mode [ 297.795703][T10793] veth0_macvtap: entered promiscuous mode [ 297.816233][T10793] veth1_macvtap: entered promiscuous mode [ 297.835115][T10931] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1567'. [ 297.846885][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.858673][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.873711][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.884526][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.899850][T10793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.923874][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.956930][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.967268][T10793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.978527][T10793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.007044][T10793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.040897][T10793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.049929][T10793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.060665][T10793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.070226][T10793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.358616][T10238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.381879][T10238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.472300][T10236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.489931][T10236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.008679][T10958] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 299.037208][T10958] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1575'. [ 299.225669][T10971] syz.1.1580[10971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.225813][T10971] syz.1.1580[10971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.580465][ T5792] Bluetooth: hci3: command tx timeout [ 299.790903][T10987] netlink: 'syz.1.1585': attribute type 3 has an invalid length. [ 299.799044][T10987] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1585'. [ 299.955186][T10989] netlink: 'syz.3.1586': attribute type 10 has an invalid length. [ 299.975461][T10989] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1586'. [ 299.985171][T10989] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 300.318025][T10993] netlink: 'syz.1.1587': attribute type 21 has an invalid length. [ 300.350485][T10993] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.467951][T10995] netlink: 'syz.1.1587': attribute type 2 has an invalid length. [ 300.487636][T10995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1587'. [ 300.546293][T10997] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1588'. [ 300.635361][T11005] netlink: 'syz.1.1591': attribute type 41 has an invalid length. [ 300.663149][T11005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1591'. [ 300.861876][T11020] netlink: 'syz.1.1595': attribute type 9 has an invalid length. [ 300.869807][T11020] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1595'. [ 300.936318][T11021] netlink: 'syz.1.1595': attribute type 9 has an invalid length. [ 300.945100][T11021] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1595'. [ 302.394880][T11047] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1603'. [ 302.431814][T11052] netlink: 'syz.3.1605': attribute type 21 has an invalid length. [ 302.667019][T11052] netlink: 'syz.3.1605': attribute type 10 has an invalid length. [ 302.774388][T11052] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 303.190827][T11063] syzkaller0: entered promiscuous mode [ 303.209042][T11063] syzkaller0: entered allmulticast mode [ 303.925381][T11069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.465667][T11101] syz.1.1620[11101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.465808][T11101] syz.1.1620[11101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.179477][T11114] netlink: 'syz.0.1623': attribute type 10 has an invalid length. [ 306.394984][T11118] netlink: 'syz.0.1625': attribute type 10 has an invalid length. [ 306.403257][T11118] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1625'. [ 306.423042][T11117] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1624'. [ 306.438609][T11118] bond0: (slave team0): Releasing backup interface [ 306.457426][T11118] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 306.486496][T11116] delete_channel: no stack [ 306.887076][T11136] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1630'. [ 307.313229][T11143] netlink: 'syz.3.1632': attribute type 10 has an invalid length. [ 307.338052][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.346192][T11143] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.431005][T11143] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.438305][T11143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.446106][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.453460][T11143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.494274][T11143] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 307.561306][T11149] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1634'. [ 308.076202][T11160] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1637'. [ 308.474115][T11167] netlink: 'syz.3.1639': attribute type 9 has an invalid length. [ 308.513597][T11167] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1639'. [ 308.580494][T11171] netlink: 'syz.2.1640': attribute type 2 has an invalid length. [ 308.594431][T11171] netlink: 'syz.2.1640': attribute type 8 has an invalid length. [ 308.602821][T11171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1640'. [ 308.623748][T11171] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 308.633355][T11168] netlink: 'syz.3.1639': attribute type 9 has an invalid length. [ 308.634950][T11171] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1640'. [ 308.655809][T11171] bond0: entered promiscuous mode [ 308.661250][T11171] bond_slave_0: entered promiscuous mode [ 308.667242][T11171] bond_slave_1: entered promiscuous mode [ 308.674144][T11171] bridge0: entered promiscuous mode [ 308.679732][T11171] team0: entered promiscuous mode [ 308.680416][T11168] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1639'. [ 308.685509][T11171] C: entered promiscuous mode [ 308.699574][T11171] team_slave_1: entered promiscuous mode [ 308.705903][T11171] vlan0: entered promiscuous mode [ 308.714835][T11171] geneve1: entered promiscuous mode [ 308.720715][T11171] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 308.733470][T11171] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 308.741575][T11171] bridge0: port 1(bond0) entered blocking state [ 308.748133][T11171] bridge0: port 1(bond0) entered disabled state [ 308.755426][T11171] bond0: entered allmulticast mode [ 308.760917][T11171] bond_slave_0: entered allmulticast mode [ 308.766840][T11171] bond_slave_1: entered allmulticast mode [ 308.773164][T11171] bridge0: entered allmulticast mode [ 308.780789][T11171] team0: entered allmulticast mode [ 308.788842][T11171] C: entered allmulticast mode [ 308.795683][T11171] team_slave_1: entered allmulticast mode [ 308.804316][T11171] geneve1: entered allmulticast mode [ 308.809851][T11171] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 308.837350][T11171] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 308.853207][T11171] bond0: left allmulticast mode [ 308.868408][T11171] bond_slave_0: left allmulticast mode [ 308.874504][T11171] bond_slave_1: left allmulticast mode [ 308.891401][T11171] bridge0: left allmulticast mode [ 308.896496][T11171] team0: left allmulticast mode [ 308.910103][T11171] C: left allmulticast mode [ 308.915467][T11171] team_slave_1: left allmulticast mode [ 308.921374][T11171] geneve1: left allmulticast mode [ 308.926560][T11171] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 308.946285][T11171] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 309.156619][T11180] netlink: 'syz.2.1644': attribute type 21 has an invalid length. [ 310.132075][T11205] FAULT_INJECTION: forcing a failure. [ 310.132075][T11205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.185623][T11205] CPU: 0 PID: 11205 Comm: syz.3.1650 Not tainted syzkaller #0 [ 310.193187][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.203307][T11205] Call Trace: [ 310.206634][T11205] [ 310.209619][T11205] dump_stack_lvl+0x16c/0x230 [ 310.214372][T11205] ? show_regs_print_info+0x20/0x20 [ 310.219624][T11205] ? load_image+0x3b0/0x3b0 [ 310.224189][T11205] ? __might_fault+0xaa/0x120 [ 310.228905][T11205] ? __lock_acquire+0x7c80/0x7c80 [ 310.233985][T11205] should_fail_ex+0x39d/0x4d0 [ 310.238719][T11205] _copy_from_user+0x2f/0xe0 [ 310.243347][T11205] __sys_bpf+0x1e9/0x800 [ 310.247641][T11205] ? bpf_link_show_fdinfo+0x350/0x350 [ 310.253082][T11205] ? lock_chain_count+0x20/0x20 [ 310.257987][T11205] __x64_sys_bpf+0x7c/0x90 [ 310.262436][T11205] do_syscall_64+0x55/0xb0 [ 310.266894][T11205] ? clear_bhb_loop+0x40/0x90 [ 310.271616][T11205] ? clear_bhb_loop+0x40/0x90 [ 310.276345][T11205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.282260][T11205] RIP: 0033:0x7f4287f8f749 [ 310.286723][T11205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.306377][T11205] RSP: 002b:00007f42861f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.314836][T11205] RAX: ffffffffffffffda RBX: 00007f42881e6090 RCX: 00007f4287f8f749 [ 310.322832][T11205] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 310.330829][T11205] RBP: 00007f42861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 310.338823][T11205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.346815][T11205] R13: 00007f42881e6128 R14: 00007f42881e6090 R15: 00007ffe34e75d58 [ 310.354860][T11205] [ 310.838435][T11217] netlink: 'syz.3.1655': attribute type 10 has an invalid length. [ 310.846691][T11217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1655'. [ 310.857290][T11217] batman_adv: batadv0: Adding interface: vlan1 [ 310.863765][T11217] batman_adv: batadv0: The MTU of interface vlan1 is too small (1024) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.895754][T11217] batman_adv: batadv0: Interface activated: vlan1 [ 311.216172][T11234] FAULT_INJECTION: forcing a failure. [ 311.216172][T11234] name failslab, interval 1, probability 0, space 0, times 1 [ 311.240265][T11234] CPU: 0 PID: 11234 Comm: syz.3.1661 Not tainted syzkaller #0 [ 311.247769][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.257835][T11234] Call Trace: [ 311.261123][T11234] [ 311.264068][T11234] dump_stack_lvl+0x16c/0x230 [ 311.268757][T11234] ? show_regs_print_info+0x20/0x20 [ 311.273963][T11234] ? load_image+0x3b0/0x3b0 [ 311.278474][T11234] ? __lock_acquire+0x7c80/0x7c80 [ 311.283516][T11234] should_fail_ex+0x39d/0x4d0 [ 311.288212][T11234] should_failslab+0x9/0x20 [ 311.292727][T11234] slab_pre_alloc_hook+0x59/0x310 [ 311.297758][T11234] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 311.304358][T11234] ? bpf_test_init+0xc0/0x150 [ 311.309036][T11234] ? bpf_test_init+0xc0/0x150 [ 311.313733][T11234] __kmem_cache_alloc_node+0x53/0x260 [ 311.319132][T11234] ? bpf_test_init+0xc0/0x150 [ 311.323820][T11234] __kmalloc+0xa4/0x240 [ 311.327991][T11234] bpf_test_init+0xc0/0x150 [ 311.332508][T11234] bpf_prog_test_run_xdp+0x382/0xfa0 [ 311.337820][T11234] ? dev_put+0x80/0x80 [ 311.341903][T11234] ? dev_put+0x80/0x80 [ 311.346034][T11234] bpf_prog_test_run+0x321/0x390 [ 311.351004][T11234] __sys_bpf+0x440/0x800 [ 311.355267][T11234] ? bpf_link_show_fdinfo+0x350/0x350 [ 311.360655][T11234] ? lock_chain_count+0x20/0x20 [ 311.365518][T11234] __x64_sys_bpf+0x7c/0x90 [ 311.369939][T11234] do_syscall_64+0x55/0xb0 [ 311.374374][T11234] ? clear_bhb_loop+0x40/0x90 [ 311.379054][T11234] ? clear_bhb_loop+0x40/0x90 [ 311.383744][T11234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.389661][T11234] RIP: 0033:0x7f4287f8f749 [ 311.394082][T11234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.413698][T11234] RSP: 002b:00007f4288d5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.422122][T11234] RAX: ffffffffffffffda RBX: 00007f42881e5fa0 RCX: 00007f4287f8f749 [ 311.430122][T11234] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 311.438101][T11234] RBP: 00007f4288d5b090 R08: 0000000000000000 R09: 0000000000000000 [ 311.446070][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.454044][T11234] R13: 00007f42881e6038 R14: 00007f42881e5fa0 R15: 00007ffe34e75d58 [ 311.462034][T11234] [ 312.052825][T11259] netlink: 17071 bytes leftover after parsing attributes in process `syz.2.1670'. [ 312.133837][T11255] FAULT_INJECTION: forcing a failure. [ 312.133837][T11255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.151947][T11255] CPU: 1 PID: 11255 Comm: syz.0.1669 Not tainted syzkaller #0 [ 312.159476][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.169568][T11255] Call Trace: [ 312.172870][T11255] [ 312.175809][T11255] dump_stack_lvl+0x16c/0x230 [ 312.180511][T11255] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.186672][T11255] ? show_regs_print_info+0x20/0x20 [ 312.191874][T11255] ? load_image+0x3b0/0x3b0 [ 312.196388][T11255] should_fail_ex+0x39d/0x4d0 [ 312.201077][T11255] _copy_from_user+0x2f/0xe0 [ 312.205682][T11255] ___sys_sendmsg+0x159/0x290 [ 312.210372][T11255] ? __sys_sendmsg+0x270/0x270 [ 312.215185][T11255] __se_sys_sendmsg+0x1a5/0x270 [ 312.220050][T11255] ? __x64_sys_sendmsg+0x80/0x80 [ 312.225022][T11255] ? syscall_enter_from_user_mode+0x2e/0x80 [ 312.230941][T11255] do_syscall_64+0x55/0xb0 [ 312.235363][T11255] ? clear_bhb_loop+0x40/0x90 [ 312.240047][T11255] ? clear_bhb_loop+0x40/0x90 [ 312.244752][T11255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.250659][T11255] RIP: 0033:0x7f0b22f8f749 [ 312.255076][T11255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.274700][T11255] RSP: 002b:00007f0b23f14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.283129][T11255] RAX: ffffffffffffffda RBX: 00007f0b231e5fa0 RCX: 00007f0b22f8f749 [ 312.291121][T11255] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 312.299145][T11255] RBP: 00007f0b23f14090 R08: 0000000000000000 R09: 0000000000000000 [ 312.307134][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.315114][T11255] R13: 00007f0b231e6038 R14: 00007f0b231e5fa0 R15: 00007ffe135cc618 [ 312.323115][T11255] [ 312.945682][T11270] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1673'. [ 312.957775][T11270] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 312.973956][T11270] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 313.071075][T11279] FAULT_INJECTION: forcing a failure. [ 313.071075][T11279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.090314][T11279] CPU: 0 PID: 11279 Comm: syz.3.1676 Not tainted syzkaller #0 [ 313.097838][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.107924][T11279] Call Trace: [ 313.111221][T11279] [ 313.114172][T11279] dump_stack_lvl+0x16c/0x230 [ 313.118882][T11279] ? show_regs_print_info+0x20/0x20 [ 313.124118][T11279] ? load_image+0x3b0/0x3b0 [ 313.128651][T11279] ? __lock_acquire+0x7c80/0x7c80 [ 313.133715][T11279] ? __virt_addr_valid+0x18c/0x540 [ 313.138858][T11279] should_fail_ex+0x39d/0x4d0 [ 313.143572][T11279] _copy_from_user+0x2f/0xe0 [ 313.148183][T11279] bpf_test_init+0xf9/0x150 [ 313.152708][T11279] bpf_prog_test_run_xdp+0x382/0xfa0 [ 313.158006][T11279] ? lockdep_hardirqs_on+0x98/0x150 [ 313.163257][T11279] ? dev_put+0x80/0x80 [ 313.167334][T11279] ? dev_put+0x80/0x80 [ 313.171406][T11279] bpf_prog_test_run+0x321/0x390 [ 313.176394][T11279] __sys_bpf+0x440/0x800 [ 313.180655][T11279] ? bpf_link_show_fdinfo+0x350/0x350 [ 313.186056][T11279] ? lock_chain_count+0x20/0x20 [ 313.190919][T11279] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 313.196912][T11279] __x64_sys_bpf+0x7c/0x90 [ 313.201336][T11279] do_syscall_64+0x55/0xb0 [ 313.205756][T11279] ? clear_bhb_loop+0x40/0x90 [ 313.210439][T11279] ? clear_bhb_loop+0x40/0x90 [ 313.215128][T11279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.221025][T11279] RIP: 0033:0x7f4287f8f749 [ 313.225445][T11279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.245081][T11279] RSP: 002b:00007f4288d5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.253500][T11279] RAX: ffffffffffffffda RBX: 00007f42881e5fa0 RCX: 00007f4287f8f749 [ 313.261481][T11279] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 313.269452][T11279] RBP: 00007f4288d5b090 R08: 0000000000000000 R09: 0000000000000000 [ 313.277424][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.285393][T11279] R13: 00007f42881e6038 R14: 00007f42881e5fa0 R15: 00007ffe34e75d58 [ 313.293397][T11279] [ 313.837480][T11301] FAULT_INJECTION: forcing a failure. [ 313.837480][T11301] name failslab, interval 1, probability 0, space 0, times 0 [ 313.895927][T11301] CPU: 1 PID: 11301 Comm: syz.2.1682 Not tainted syzkaller #0 [ 313.903458][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.913542][T11301] Call Trace: [ 313.916865][T11301] [ 313.919824][T11301] dump_stack_lvl+0x16c/0x230 [ 313.924550][T11301] ? show_regs_print_info+0x20/0x20 [ 313.929787][T11301] ? lockdep_hardirqs_on+0x98/0x150 [ 313.935024][T11301] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.941216][T11301] should_fail_ex+0x39d/0x4d0 [ 313.945923][T11301] should_failslab+0x9/0x20 [ 313.950446][T11301] slab_pre_alloc_hook+0x59/0x310 [ 313.955498][T11301] ? __lock_acquire+0x7c80/0x7c80 [ 313.960643][T11301] kmem_cache_alloc_node+0x60/0x330 [ 313.965911][T11301] ? __alloc_skb+0x108/0x2c0 [ 313.970533][T11301] __alloc_skb+0x108/0x2c0 [ 313.974975][T11301] netlink_sendmsg+0x65b/0xbe0 [ 313.979778][T11301] ? netlink_getsockopt+0x580/0x580 [ 313.985027][T11301] ? aa_sock_msg_perm+0x94/0x150 [ 313.989993][T11301] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 313.995299][T11301] ? security_socket_sendmsg+0x80/0xa0 [ 314.000771][T11301] ? netlink_getsockopt+0x580/0x580 [ 314.006000][T11301] ____sys_sendmsg+0x5bf/0x950 [ 314.010800][T11301] ? __asan_memset+0x22/0x40 [ 314.015406][T11301] ? __sys_sendmsg_sock+0x30/0x30 [ 314.020448][T11301] ? __import_iovec+0x5f2/0x860 [ 314.025328][T11301] ? import_iovec+0x73/0xa0 [ 314.029864][T11301] ___sys_sendmsg+0x220/0x290 [ 314.034577][T11301] ? __sys_sendmsg+0x270/0x270 [ 314.039404][T11301] __se_sys_sendmsg+0x1a5/0x270 [ 314.044288][T11301] ? __x64_sys_sendmsg+0x80/0x80 [ 314.049270][T11301] do_syscall_64+0x55/0xb0 [ 314.053739][T11301] ? clear_bhb_loop+0x40/0x90 [ 314.058437][T11301] ? clear_bhb_loop+0x40/0x90 [ 314.063135][T11301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.069041][T11301] RIP: 0033:0x7f83fe18f749 [ 314.073475][T11301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.093092][T11301] RSP: 002b:00007f83fc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.101523][T11301] RAX: ffffffffffffffda RBX: 00007f83fe3e5fa0 RCX: 00007f83fe18f749 [ 314.109515][T11301] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 314.117497][T11301] RBP: 00007f83fc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.125484][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.133485][T11301] R13: 00007f83fe3e6038 R14: 00007f83fe3e5fa0 R15: 00007ffe76424ac8 [ 314.141503][T11301] [ 314.356560][T11303] netlink: 'syz.1.1684': attribute type 21 has an invalid length. [ 314.384215][T11303] netlink: 'syz.1.1684': attribute type 1 has an invalid length. [ 314.431508][T11303] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.1684'. [ 314.609267][T11308] FAULT_INJECTION: forcing a failure. [ 314.609267][T11308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.650319][T11308] CPU: 1 PID: 11308 Comm: syz.3.1686 Not tainted syzkaller #0 [ 314.657846][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.667931][T11308] Call Trace: [ 314.671227][T11308] [ 314.674163][T11308] dump_stack_lvl+0x16c/0x230 [ 314.678857][T11308] ? show_regs_print_info+0x20/0x20 [ 314.684069][T11308] ? load_image+0x3b0/0x3b0 [ 314.688580][T11308] ? __lock_acquire+0x7c80/0x7c80 [ 314.693613][T11308] ? __virt_addr_valid+0x18c/0x540 [ 314.698735][T11308] should_fail_ex+0x39d/0x4d0 [ 314.703426][T11308] _copy_from_user+0x2f/0xe0 [ 314.708024][T11308] bpf_test_init+0xf9/0x150 [ 314.712529][T11308] bpf_prog_test_run_xdp+0x382/0xfa0 [ 314.717840][T11308] ? dev_put+0x80/0x80 [ 314.721922][T11308] ? dev_put+0x80/0x80 [ 314.725997][T11308] bpf_prog_test_run+0x321/0x390 [ 314.730965][T11308] __sys_bpf+0x440/0x800 [ 314.735215][T11308] ? bpf_link_show_fdinfo+0x350/0x350 [ 314.740600][T11308] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.746769][T11308] __x64_sys_bpf+0x7c/0x90 [ 314.751188][T11308] do_syscall_64+0x55/0xb0 [ 314.755606][T11308] ? clear_bhb_loop+0x40/0x90 [ 314.760309][T11308] ? clear_bhb_loop+0x40/0x90 [ 314.764989][T11308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.770888][T11308] RIP: 0033:0x7f4287f8f749 [ 314.775367][T11308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.795153][T11308] RSP: 002b:00007f4288d5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.803569][T11308] RAX: ffffffffffffffda RBX: 00007f42881e5fa0 RCX: 00007f4287f8f749 [ 314.811548][T11308] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 314.819523][T11308] RBP: 00007f4288d5b090 R08: 0000000000000000 R09: 0000000000000000 [ 314.827496][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.835472][T11308] R13: 00007f42881e6038 R14: 00007f42881e5fa0 R15: 00007ffe34e75d58 [ 314.843467][T11308] [ 315.383282][T11334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1695'. [ 315.475125][T11338] netlink: 'syz.0.1698': attribute type 39 has an invalid length. [ 315.577787][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 315.618096][T11344] FAULT_INJECTION: forcing a failure. [ 315.618096][T11344] name failslab, interval 1, probability 0, space 0, times 0 [ 315.643658][T11344] CPU: 1 PID: 11344 Comm: syz.1.1701 Not tainted syzkaller #0 [ 315.651203][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.661295][T11344] Call Trace: [ 315.664599][T11344] [ 315.667550][T11344] dump_stack_lvl+0x16c/0x230 [ 315.672270][T11344] ? show_regs_print_info+0x20/0x20 [ 315.677499][T11344] ? load_image+0x3b0/0x3b0 [ 315.682032][T11344] ? __might_sleep+0xe0/0xe0 [ 315.686646][T11344] ? __lock_acquire+0x7c80/0x7c80 [ 315.691702][T11344] should_fail_ex+0x39d/0x4d0 [ 315.696423][T11344] should_failslab+0x9/0x20 [ 315.700956][T11344] slab_pre_alloc_hook+0x59/0x310 [ 315.706013][T11344] ? kvmalloc_node+0x70/0x180 [ 315.710733][T11344] ? kvmalloc_node+0x70/0x180 [ 315.715435][T11344] __kmem_cache_alloc_node+0x53/0x260 [ 315.720861][T11344] ? kvmalloc_node+0x70/0x180 [ 315.725563][T11344] __kmalloc_node+0xa4/0x230 [ 315.730216][T11344] kvmalloc_node+0x70/0x180 [ 315.734772][T11344] bpf_test_run_xdp_live+0x1a7/0x1a20 [ 315.740218][T11344] ? 0xffffffffa0004740 [ 315.744434][T11344] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 315.750352][T11344] ? __might_fault+0xaa/0x120 [ 315.755073][T11344] ? xdp_convert_md_to_buff+0x330/0x330 [ 315.760734][T11344] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 315.767004][T11344] ? _copy_from_user+0xa5/0xe0 [ 315.771798][T11344] ? bpf_test_init+0x134/0x150 [ 315.776586][T11344] ? xdp_convert_md_to_buff+0x5b/0x330 [ 315.782075][T11344] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 315.787419][T11344] ? dev_put+0x80/0x80 [ 315.791532][T11344] ? dev_put+0x80/0x80 [ 315.795624][T11344] bpf_prog_test_run+0x321/0x390 [ 315.800595][T11344] __sys_bpf+0x440/0x800 [ 315.804871][T11344] ? bpf_link_show_fdinfo+0x350/0x350 [ 315.810319][T11344] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.816524][T11344] __x64_sys_bpf+0x7c/0x90 [ 315.820963][T11344] do_syscall_64+0x55/0xb0 [ 315.825400][T11344] ? clear_bhb_loop+0x40/0x90 [ 315.830097][T11344] ? clear_bhb_loop+0x40/0x90 [ 315.834835][T11344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.840762][T11344] RIP: 0033:0x7fcc04d8f749 [ 315.845201][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.864833][T11344] RSP: 002b:00007fcc05b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.873276][T11344] RAX: ffffffffffffffda RBX: 00007fcc04fe5fa0 RCX: 00007fcc04d8f749 [ 315.881268][T11344] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 315.889261][T11344] RBP: 00007fcc05b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 315.897253][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.905242][T11344] R13: 00007fcc04fe6038 R14: 00007fcc04fe5fa0 R15: 00007fff1d4b94d8 [ 315.913267][T11344] [ 317.100239][T11374] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1709'. [ 317.112352][T11377] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1707'. [ 317.141682][T11377] netlink: zone id is out of range [ 317.146950][T11377] netlink: zone id is out of range [ 317.158756][T11377] netlink: zone id is out of range [ 317.166702][T11377] netlink: zone id is out of range [ 317.175123][T11377] netlink: zone id is out of range [ 317.191777][T11377] netlink: zone id is out of range [ 317.203332][T11377] netlink: zone id is out of range [ 317.220311][T11377] netlink: zone id is out of range [ 317.344755][T11387] FAULT_INJECTION: forcing a failure. [ 317.344755][T11387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.361629][T11387] CPU: 1 PID: 11387 Comm: syz.3.1710 Not tainted syzkaller #0 [ 317.369138][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.379216][T11387] Call Trace: [ 317.382517][T11387] [ 317.385471][T11387] dump_stack_lvl+0x16c/0x230 [ 317.390212][T11387] ? show_regs_print_info+0x20/0x20 [ 317.395444][T11387] ? load_image+0x3b0/0x3b0 [ 317.399970][T11387] ? __might_fault+0xaa/0x120 [ 317.404675][T11387] ? __lock_acquire+0x7c80/0x7c80 [ 317.409736][T11387] should_fail_ex+0x39d/0x4d0 [ 317.414504][T11387] _copy_from_iter+0x1d3/0x1290 [ 317.419390][T11387] ? slab_post_alloc_hook+0x8a/0x4d0 [ 317.424711][T11387] ? __virt_addr_valid+0x18c/0x540 [ 317.429854][T11387] ? __lock_acquire+0x7c80/0x7c80 [ 317.434922][T11387] ? rcu_is_watching+0x15/0xb0 [ 317.439720][T11387] ? copyout_mc+0x70/0x70 [ 317.444087][T11387] ? __virt_addr_valid+0x18c/0x540 [ 317.448190][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.449241][T11387] ? __virt_addr_valid+0x18c/0x540 [ 317.460639][T11387] ? __virt_addr_valid+0x469/0x540 [ 317.465783][T11387] ? __check_object_size+0x506/0xa30 [ 317.466769][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.471092][T11387] netlink_sendmsg+0x75c/0xbe0 [ 317.471133][T11387] ? netlink_getsockopt+0x580/0x580 [ 317.487340][T11387] ? perf_trace_preemptirq_template+0xa4/0x340 [ 317.493536][T11387] ? aa_sock_msg_perm+0x94/0x150 [ 317.498506][T11387] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 317.503824][T11387] ? security_socket_sendmsg+0x80/0xa0 [ 317.509310][T11387] ? netlink_getsockopt+0x580/0x580 [ 317.514541][T11387] ____sys_sendmsg+0x5bf/0x950 [ 317.519360][T11387] ? __asan_memset+0x22/0x40 [ 317.523987][T11387] ? __sys_sendmsg_sock+0x30/0x30 [ 317.529047][T11387] ? __import_iovec+0x5f2/0x860 [ 317.533941][T11387] ? import_iovec+0x73/0xa0 [ 317.538505][T11387] ___sys_sendmsg+0x220/0x290 [ 317.543214][T11387] ? __sys_sendmsg+0x270/0x270 [ 317.548026][T11387] ? __lock_acquire+0x7c80/0x7c80 [ 317.553102][T11387] __se_sys_sendmsg+0x1a5/0x270 [ 317.557996][T11387] ? __x64_sys_sendmsg+0x80/0x80 [ 317.562981][T11387] ? lockdep_hardirqs_on+0x98/0x150 [ 317.568226][T11387] do_syscall_64+0x55/0xb0 [ 317.572682][T11387] ? clear_bhb_loop+0x40/0x90 [ 317.577384][T11387] ? clear_bhb_loop+0x40/0x90 [ 317.582089][T11387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.588040][T11387] RIP: 0033:0x7f4287f8f749 [ 317.592472][T11387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.612120][T11387] RSP: 002b:00007f42861f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.620562][T11387] RAX: ffffffffffffffda RBX: 00007f42881e6090 RCX: 00007f4287f8f749 [ 317.628556][T11387] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 317.636549][T11387] RBP: 00007f42861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 317.644536][T11387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.652524][T11387] R13: 00007f42881e6128 R14: 00007f42881e6090 R15: 00007ffe34e75d58 [ 317.660529][T11387] [ 317.795159][T11390] FAULT_INJECTION: forcing a failure. [ 317.795159][T11390] name failslab, interval 1, probability 0, space 0, times 0 [ 317.811357][T11390] CPU: 0 PID: 11390 Comm: syz.1.1715 Not tainted syzkaller #0 [ 317.818867][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.828946][T11390] Call Trace: [ 317.832264][T11390] [ 317.835225][T11390] dump_stack_lvl+0x16c/0x230 [ 317.839956][T11390] ? show_regs_print_info+0x20/0x20 [ 317.845193][T11390] ? load_image+0x3b0/0x3b0 [ 317.849731][T11390] ? __might_sleep+0xe0/0xe0 [ 317.854353][T11390] ? __lock_acquire+0x7c80/0x7c80 [ 317.859424][T11390] should_fail_ex+0x39d/0x4d0 [ 317.864147][T11390] should_failslab+0x9/0x20 [ 317.868670][T11390] slab_pre_alloc_hook+0x59/0x310 [ 317.873717][T11390] ? page_pool_create+0x71/0x5e0 [ 317.878684][T11390] __kmem_cache_alloc_node+0x53/0x260 [ 317.884084][T11390] ? page_pool_create+0x71/0x5e0 [ 317.889040][T11390] kmalloc_node_trace+0x26/0xe0 [ 317.893923][T11390] page_pool_create+0x71/0x5e0 [ 317.898698][T11390] bpf_test_run_xdp_live+0x1c1/0x1a20 [ 317.904090][T11390] ? 0xffffffffa0004740 [ 317.908267][T11390] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 317.914184][T11390] ? __sys_bpf+0x440/0x800 [ 317.918609][T11390] ? __x64_sys_bpf+0x7c/0x90 [ 317.923223][T11390] ? do_syscall_64+0x55/0xb0 [ 317.927940][T11390] ? xdp_convert_md_to_buff+0x330/0x330 [ 317.933545][T11390] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 317.939814][T11390] ? _copy_from_user+0xa5/0xe0 [ 317.944595][T11390] ? bpf_test_init+0x134/0x150 [ 317.949383][T11390] ? xdp_convert_md_to_buff+0x5b/0x330 [ 317.954869][T11390] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 317.960221][T11390] ? dev_put+0x80/0x80 [ 317.964307][T11390] ? dev_put+0x80/0x80 [ 317.968391][T11390] bpf_prog_test_run+0x321/0x390 [ 317.973352][T11390] __sys_bpf+0x440/0x800 [ 317.977625][T11390] ? bpf_link_show_fdinfo+0x350/0x350 [ 317.983031][T11390] ? lock_chain_count+0x20/0x20 [ 317.987898][T11390] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 317.993908][T11390] __x64_sys_bpf+0x7c/0x90 [ 317.998349][T11390] do_syscall_64+0x55/0xb0 [ 318.002798][T11390] ? clear_bhb_loop+0x40/0x90 [ 318.007504][T11390] ? clear_bhb_loop+0x40/0x90 [ 318.012208][T11390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.018125][T11390] RIP: 0033:0x7fcc04d8f749 [ 318.022563][T11390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.042276][T11390] RSP: 002b:00007fcc05b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.050719][T11390] RAX: ffffffffffffffda RBX: 00007fcc04fe5fa0 RCX: 00007fcc04d8f749 [ 318.058712][T11390] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 318.066704][T11390] RBP: 00007fcc05b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 318.074692][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.082690][T11390] R13: 00007fcc04fe6038 R14: 00007fcc04fe5fa0 R15: 00007fff1d4b94d8 [ 318.090764][T11390] [ 318.507797][T11412] FAULT_INJECTION: forcing a failure. [ 318.507797][T11412] name failslab, interval 1, probability 0, space 0, times 0 [ 318.523817][T11412] CPU: 0 PID: 11412 Comm: syz.1.1721 Not tainted syzkaller #0 [ 318.531328][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 318.541416][T11412] Call Trace: [ 318.544780][T11412] [ 318.547734][T11412] dump_stack_lvl+0x16c/0x230 [ 318.552460][T11412] ? show_regs_print_info+0x20/0x20 [ 318.557688][T11412] ? load_image+0x3b0/0x3b0 [ 318.562218][T11412] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 318.568212][T11412] ? lock_chain_count+0x20/0x20 [ 318.573077][T11412] should_fail_ex+0x39d/0x4d0 [ 318.577770][T11412] should_failslab+0x9/0x20 [ 318.582285][T11412] slab_pre_alloc_hook+0x59/0x310 [ 318.587350][T11412] kmem_cache_alloc+0x5a/0x2e0 [ 318.592126][T11412] ? skb_clone+0x1eb/0x370 [ 318.596561][T11412] skb_clone+0x1eb/0x370 [ 318.600821][T11412] __netlink_deliver_tap+0x41c/0x830 [ 318.606121][T11412] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.611335][T11412] netlink_deliver_tap+0x19c/0x1b0 [ 318.616494][T11412] netlink_unicast+0x72c/0x8d0 [ 318.621272][T11412] netlink_sendmsg+0x8c1/0xbe0 [ 318.626062][T11412] ? netlink_getsockopt+0x580/0x580 [ 318.631270][T11412] ? aa_sock_msg_perm+0x94/0x150 [ 318.636217][T11412] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 318.641506][T11412] ? security_socket_sendmsg+0x80/0xa0 [ 318.646986][T11412] ? netlink_getsockopt+0x580/0x580 [ 318.652198][T11412] ____sys_sendmsg+0x5bf/0x950 [ 318.656976][T11412] ? __asan_memset+0x22/0x40 [ 318.661579][T11412] ? __sys_sendmsg_sock+0x30/0x30 [ 318.666627][T11412] ? __import_iovec+0x5f2/0x860 [ 318.671497][T11412] ? import_iovec+0x73/0xa0 [ 318.676019][T11412] ___sys_sendmsg+0x220/0x290 [ 318.680709][T11412] ? __sys_sendmsg+0x270/0x270 [ 318.685501][T11412] ? __lock_acquire+0x7c80/0x7c80 [ 318.690557][T11412] __se_sys_sendmsg+0x1a5/0x270 [ 318.695423][T11412] ? __x64_sys_sendmsg+0x80/0x80 [ 318.700387][T11412] ? syscall_enter_from_user_mode+0x2e/0x80 [ 318.706283][T11412] do_syscall_64+0x55/0xb0 [ 318.710707][T11412] ? clear_bhb_loop+0x40/0x90 [ 318.715390][T11412] ? clear_bhb_loop+0x40/0x90 [ 318.720071][T11412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.725968][T11412] RIP: 0033:0x7fcc04d8f749 [ 318.730386][T11412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.749996][T11412] RSP: 002b:00007fcc05b4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.758415][T11412] RAX: ffffffffffffffda RBX: 00007fcc04fe5fa0 RCX: 00007fcc04d8f749 [ 318.766391][T11412] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 318.774364][T11412] RBP: 00007fcc05b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 318.782346][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.790315][T11412] R13: 00007fcc04fe6038 R14: 00007fcc04fe5fa0 R15: 00007fff1d4b94d8 [ 318.798309][T11412] [ 319.196470][T11433] FAULT_INJECTION: forcing a failure. [ 319.196470][T11433] name failslab, interval 1, probability 0, space 0, times 0 [ 319.234455][T11433] CPU: 1 PID: 11433 Comm: syz.2.1728 Not tainted syzkaller #0 [ 319.242004][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.252111][T11433] Call Trace: [ 319.255441][T11433] [ 319.258432][T11433] dump_stack_lvl+0x16c/0x230 [ 319.263166][T11433] ? show_regs_print_info+0x20/0x20 [ 319.268395][T11433] ? load_image+0x3b0/0x3b0 [ 319.272932][T11433] ? __might_sleep+0xe0/0xe0 [ 319.277560][T11433] ? __lock_acquire+0x7c80/0x7c80 [ 319.282623][T11433] should_fail_ex+0x39d/0x4d0 [ 319.287362][T11433] should_failslab+0x9/0x20 [ 319.291889][T11433] slab_pre_alloc_hook+0x59/0x310 [ 319.296939][T11433] ? kvmalloc_node+0x70/0x180 [ 319.301638][T11433] ? kvmalloc_node+0x70/0x180 [ 319.306335][T11433] __kmem_cache_alloc_node+0x53/0x260 [ 319.311748][T11433] ? kvmalloc_node+0x70/0x180 [ 319.316471][T11433] __kmalloc_node+0xa4/0x230 [ 319.321102][T11433] kvmalloc_node+0x70/0x180 [ 319.325642][T11433] page_pool_create+0x1f7/0x5e0 [ 319.330532][T11433] bpf_test_run_xdp_live+0x1c1/0x1a20 [ 319.335946][T11433] ? 0xffffffffa0004740 [ 319.340180][T11433] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 319.346122][T11433] ? __sys_bpf+0x440/0x800 [ 319.350559][T11433] ? __x64_sys_bpf+0x7c/0x90 [ 319.355191][T11433] ? do_syscall_64+0x55/0xb0 [ 319.359841][T11433] ? xdp_convert_md_to_buff+0x330/0x330 [ 319.365495][T11433] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 319.371765][T11433] ? _copy_from_user+0xa5/0xe0 [ 319.376556][T11433] ? bpf_test_init+0x134/0x150 [ 319.381362][T11433] ? xdp_convert_md_to_buff+0x5b/0x330 [ 319.386844][T11433] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 319.392202][T11433] ? dev_put+0x80/0x80 [ 319.396319][T11433] ? dev_put+0x80/0x80 [ 319.400405][T11433] bpf_prog_test_run+0x321/0x390 [ 319.405367][T11433] __sys_bpf+0x440/0x800 [ 319.409641][T11433] ? bpf_link_show_fdinfo+0x350/0x350 [ 319.415066][T11433] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.421279][T11433] __x64_sys_bpf+0x7c/0x90 [ 319.425720][T11433] do_syscall_64+0x55/0xb0 [ 319.430179][T11433] ? clear_bhb_loop+0x40/0x90 [ 319.434893][T11433] ? clear_bhb_loop+0x40/0x90 [ 319.439602][T11433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.445518][T11433] RIP: 0033:0x7f83fe18f749 [ 319.449953][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.469588][T11433] RSP: 002b:00007f83fc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.478034][T11433] RAX: ffffffffffffffda RBX: 00007f83fe3e5fa0 RCX: 00007f83fe18f749 [ 319.486029][T11433] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 319.494024][T11433] RBP: 00007f83fc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.502012][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.510004][T11433] R13: 00007f83fe3e6038 R14: 00007f83fe3e5fa0 R15: 00007ffe76424ac8 [ 319.518041][T11433] [ 319.557444][T11433] page_pool_create() gave up with errno -12 [ 319.712930][T11437] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1729'. [ 319.885210][T11445] FAULT_INJECTION: forcing a failure. [ 319.885210][T11445] name failslab, interval 1, probability 0, space 0, times 0 [ 319.907677][T11445] CPU: 1 PID: 11445 Comm: syz.1.1732 Not tainted syzkaller #0 [ 319.915201][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.925290][T11445] Call Trace: [ 319.928593][T11445] [ 319.931542][T11445] dump_stack_lvl+0x16c/0x230 [ 319.936234][T11445] ? show_regs_print_info+0x20/0x20 [ 319.941477][T11445] ? load_image+0x3b0/0x3b0 [ 319.945996][T11445] ? lockdep_hardirqs_on+0x98/0x150 [ 319.951212][T11445] should_fail_ex+0x39d/0x4d0 [ 319.955906][T11445] should_failslab+0x9/0x20 [ 319.960425][T11445] slab_pre_alloc_hook+0x59/0x310 [ 319.965470][T11445] ? lock_chain_count+0x20/0x20 [ 319.970325][T11445] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 319.976579][T11445] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 319.982828][T11445] __kmem_cache_alloc_node+0x53/0x260 [ 319.988215][T11445] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 319.994470][T11445] __kmalloc+0xa4/0x240 [ 319.998631][T11445] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.004796][T11445] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 320.010882][T11445] genl_family_rcv_msg_doit+0xb9/0x2f0 [ 320.016357][T11445] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 320.022268][T11445] ? apparmor_capable+0x137/0x1a0 [ 320.027294][T11445] ? bpf_lsm_capable+0x9/0x10 [ 320.031980][T11445] ? security_capable+0x89/0xb0 [ 320.036841][T11445] genl_rcv_msg+0x60b/0x790 [ 320.041358][T11445] ? genl_bind+0x360/0x360 [ 320.045780][T11445] ? devlink_get_from_attrs_lock+0x350/0x350 [ 320.051763][T11445] ? devlink_reload+0x600/0x600 [ 320.056621][T11445] ? devlink_nl_pre_doit_port_optional+0xe0/0xe0 [ 320.062980][T11445] ? mark_lock+0x94/0x320 [ 320.067319][T11445] netlink_rcv_skb+0x216/0x480 [ 320.072099][T11445] ? genl_bind+0x360/0x360 [ 320.076545][T11445] ? netlink_ack+0x1110/0x1110 [ 320.081333][T11445] ? down_read+0x61/0x2e0 [ 320.085682][T11445] ? down_read+0x1ac/0x2e0 [ 320.090118][T11445] genl_rcv+0x28/0x40 [ 320.094128][T11445] netlink_unicast+0x751/0x8d0 [ 320.098908][T11445] netlink_sendmsg+0x8c1/0xbe0 [ 320.103698][T11445] ? netlink_getsockopt+0x580/0x580 [ 320.108910][T11445] ? aa_sock_msg_perm+0x94/0x150 [ 320.113862][T11445] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 320.119158][T11445] ? security_socket_sendmsg+0x80/0xa0 [ 320.124628][T11445] ? netlink_getsockopt+0x580/0x580 [ 320.129839][T11445] ____sys_sendmsg+0x5bf/0x950 [ 320.134619][T11445] ? __asan_memset+0x22/0x40 [ 320.139217][T11445] ? __sys_sendmsg_sock+0x30/0x30 [ 320.144306][T11445] ? __import_iovec+0x5f2/0x860 [ 320.149192][T11445] ? import_iovec+0x73/0xa0 [ 320.153720][T11445] ___sys_sendmsg+0x220/0x290 [ 320.158430][T11445] ? __sys_sendmsg+0x270/0x270 [ 320.163258][T11445] __se_sys_sendmsg+0x1a5/0x270 [ 320.168127][T11445] ? perf_trace_preemptirq_template+0x281/0x340 [ 320.174381][T11445] ? __x64_sys_sendmsg+0x80/0x80 [ 320.179351][T11445] ? lockdep_hardirqs_on+0x98/0x150 [ 320.184556][T11445] do_syscall_64+0x55/0xb0 [ 320.188987][T11445] ? clear_bhb_loop+0x40/0x90 [ 320.193687][T11445] ? clear_bhb_loop+0x40/0x90 [ 320.198371][T11445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.204277][T11445] RIP: 0033:0x7fcc04d8f749 [ 320.208715][T11445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.228348][T11445] RSP: 002b:00007fcc05b4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.236784][T11445] RAX: ffffffffffffffda RBX: 00007fcc04fe5fa0 RCX: 00007fcc04d8f749 [ 320.244767][T11445] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 320.252745][T11445] RBP: 00007fcc05b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 320.260723][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.268698][T11445] R13: 00007fcc04fe6038 R14: 00007fcc04fe5fa0 R15: 00007fff1d4b94d8 [ 320.276712][T11445] [ 320.566927][T11449] netlink: 'syz.2.1734': attribute type 28 has an invalid length. [ 320.594311][T11449] netlink: 'syz.2.1734': attribute type 4 has an invalid length. [ 320.603550][T11449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1734'. [ 320.788809][T11458] FAULT_INJECTION: forcing a failure. [ 320.788809][T11458] name failslab, interval 1, probability 0, space 0, times 0 [ 320.820371][T11458] CPU: 1 PID: 11458 Comm: syz.1.1739 Not tainted syzkaller #0 [ 320.827891][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.837963][T11458] Call Trace: [ 320.841253][T11458] [ 320.844193][T11458] dump_stack_lvl+0x16c/0x230 [ 320.848887][T11458] ? show_regs_print_info+0x20/0x20 [ 320.854101][T11458] ? load_image+0x3b0/0x3b0 [ 320.858623][T11458] ? __might_sleep+0xe0/0xe0 [ 320.863226][T11458] ? __lock_acquire+0x7c80/0x7c80 [ 320.868265][T11458] should_fail_ex+0x39d/0x4d0 [ 320.872961][T11458] should_failslab+0x9/0x20 [ 320.877479][T11458] slab_pre_alloc_hook+0x59/0x310 [ 320.882517][T11458] ? __xdp_reg_mem_model+0x1d9/0x5a0 [ 320.887812][T11458] __kmem_cache_alloc_node+0x53/0x260 [ 320.893203][T11458] ? __asan_memset+0x22/0x40 [ 320.897814][T11458] ? __xdp_reg_mem_model+0x1d9/0x5a0 [ 320.903102][T11458] kmalloc_trace+0x2a/0xe0 [ 320.907530][T11458] __xdp_reg_mem_model+0x1d9/0x5a0 [ 320.912652][T11458] ? kvmalloc_node+0x70/0x180 [ 320.917339][T11458] ? xdp_reg_mem_model+0x40/0x40 [ 320.922305][T11458] xdp_reg_mem_model+0x22/0x40 [ 320.927095][T11458] bpf_test_run_xdp_live+0x20c/0x1a20 [ 320.932476][T11458] ? 0xffffffffa0004740 [ 320.936637][T11458] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 320.942565][T11458] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 320.949170][T11458] ? xdp_convert_md_to_buff+0x330/0x330 [ 320.954750][T11458] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 320.960997][T11458] ? _copy_from_user+0xa5/0xe0 [ 320.965771][T11458] ? bpf_test_init+0x134/0x150 [ 320.970544][T11458] ? xdp_convert_md_to_buff+0x5b/0x330 [ 320.976007][T11458] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 320.981310][T11458] ? dev_put+0x80/0x80 [ 320.985398][T11458] ? dev_put+0x80/0x80 [ 320.989468][T11458] bpf_prog_test_run+0x321/0x390 [ 320.994410][T11458] __sys_bpf+0x440/0x800 [ 320.998658][T11458] ? bpf_link_show_fdinfo+0x350/0x350 [ 321.004042][T11458] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.010218][T11458] __x64_sys_bpf+0x7c/0x90 [ 321.014635][T11458] do_syscall_64+0x55/0xb0 [ 321.019061][T11458] ? clear_bhb_loop+0x40/0x90 [ 321.023756][T11458] ? clear_bhb_loop+0x40/0x90 [ 321.028440][T11458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.034333][T11458] RIP: 0033:0x7fcc04d8f749 [ 321.038752][T11458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.058364][T11458] RSP: 002b:00007fcc05b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 321.066781][T11458] RAX: ffffffffffffffda RBX: 00007fcc04fe5fa0 RCX: 00007fcc04d8f749 [ 321.074754][T11458] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 321.082726][T11458] RBP: 00007fcc05b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 321.090702][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.098673][T11458] R13: 00007fcc04fe6038 R14: 00007fcc04fe5fa0 R15: 00007fff1d4b94d8 [ 321.106677][T11458] [ 322.025574][T11472] FAULT_INJECTION: forcing a failure. [ 322.025574][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 322.045525][T11472] CPU: 1 PID: 11472 Comm: syz.0.1744 Not tainted syzkaller #0 [ 322.053046][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.063136][T11472] Call Trace: [ 322.066432][T11472] [ 322.069379][T11472] dump_stack_lvl+0x16c/0x230 [ 322.074098][T11472] ? show_regs_print_info+0x20/0x20 [ 322.079328][T11472] ? load_image+0x3b0/0x3b0 [ 322.083863][T11472] ? __might_sleep+0xe0/0xe0 [ 322.088479][T11472] ? __lock_acquire+0x7c80/0x7c80 [ 322.093538][T11472] should_fail_ex+0x39d/0x4d0 [ 322.098252][T11472] should_failslab+0x9/0x20 [ 322.102793][T11472] slab_pre_alloc_hook+0x59/0x310 [ 322.107855][T11472] ? genl_family_rcv_msg_doit+0x255/0x2f0 [ 322.113611][T11472] kmem_cache_alloc_node+0x60/0x330 [ 322.118843][T11472] ? __alloc_skb+0x108/0x2c0 [ 322.123484][T11472] __alloc_skb+0x108/0x2c0 [ 322.127938][T11472] netlink_ack+0x376/0x1110 [ 322.132480][T11472] ? genl_rcv_msg+0x60b/0x790 [ 322.137181][T11472] ? genl_bind+0x360/0x360 [ 322.141619][T11472] ? netlink_dump+0xde0/0xde0 [ 322.146309][T11472] ? ref_tracker_free+0x634/0x7d0 [ 322.151345][T11472] ? __copy_skb_header+0xa7/0x550 [ 322.156400][T11472] netlink_rcv_skb+0x29a/0x480 [ 322.161175][T11472] ? genl_bind+0x360/0x360 [ 322.165607][T11472] ? netlink_ack+0x1110/0x1110 [ 322.170384][T11472] ? __lock_acquire+0x7c80/0x7c80 [ 322.175414][T11472] ? down_read+0x1ac/0x2e0 [ 322.179843][T11472] genl_rcv+0x28/0x40 [ 322.183844][T11472] netlink_unicast+0x751/0x8d0 [ 322.188628][T11472] netlink_sendmsg+0x8c1/0xbe0 [ 322.193402][T11472] ? lockdep_hardirqs_on+0x98/0x150 [ 322.198604][T11472] ? netlink_getsockopt+0x580/0x580 [ 322.203832][T11472] ? netlink_getsockopt+0x580/0x580 [ 322.209045][T11472] ____sys_sendmsg+0x5bf/0x950 [ 322.213830][T11472] ? __asan_memset+0x22/0x40 [ 322.218428][T11472] ? __sys_sendmsg_sock+0x30/0x30 [ 322.223462][T11472] ? __import_iovec+0x5f2/0x860 [ 322.228328][T11472] ? import_iovec+0x73/0xa0 [ 322.232839][T11472] ___sys_sendmsg+0x220/0x290 [ 322.237524][T11472] ? __sys_sendmsg+0x270/0x270 [ 322.242345][T11472] __se_sys_sendmsg+0x1a5/0x270 [ 322.247220][T11472] ? __x64_sys_sendmsg+0x80/0x80 [ 322.252186][T11472] ? syscall_enter_from_user_mode+0x2e/0x80 [ 322.258112][T11472] do_syscall_64+0x55/0xb0 [ 322.262552][T11472] ? clear_bhb_loop+0x40/0x90 [ 322.267250][T11472] ? clear_bhb_loop+0x40/0x90 [ 322.271937][T11472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.277849][T11472] RIP: 0033:0x7f0b22f8f749 [ 322.282272][T11472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.301899][T11472] RSP: 002b:00007f0b23f14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.310324][T11472] RAX: ffffffffffffffda RBX: 00007f0b231e5fa0 RCX: 00007f0b22f8f749 [ 322.318317][T11472] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 322.326316][T11472] RBP: 00007f0b23f14090 R08: 0000000000000000 R09: 0000000000000000 [ 322.334312][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.342295][T11472] R13: 00007f0b231e6038 R14: 00007f0b231e5fa0 R15: 00007ffe135cc618 [ 322.350296][T11472] [ 322.399496][T11475] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1745'. [ 322.405197][T11483] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1747'. [ 322.416510][T11475] net_ratelimit: 45 callbacks suppressed [ 322.416529][T11475] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 322.436154][T11476] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 322.475628][T11476] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1745'. [ 322.543163][T11475] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 322.570509][T11475] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1745'. [ 322.721100][T11489] FAULT_INJECTION: forcing a failure. [ 322.721100][T11489] name failslab, interval 1, probability 0, space 0, times 0 [ 322.734245][T11489] CPU: 0 PID: 11489 Comm: syz.2.1750 Not tainted syzkaller #0 [ 322.741747][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.751841][T11489] Call Trace: [ 322.755156][T11489] [ 322.758115][T11489] dump_stack_lvl+0x16c/0x230 [ 322.762834][T11489] ? show_regs_print_info+0x20/0x20 [ 322.768052][T11489] ? load_image+0x3b0/0x3b0 [ 322.772575][T11489] ? perf_trace_preemptirq_template+0x281/0x340 [ 322.778859][T11489] should_fail_ex+0x39d/0x4d0 [ 322.783576][T11489] should_failslab+0x9/0x20 [ 322.788104][T11489] slab_pre_alloc_hook+0x59/0x310 [ 322.793161][T11489] ? ida_alloc_range+0x654/0x830 [ 322.798135][T11489] __kmem_cache_alloc_node+0x53/0x260 [ 322.803552][T11489] ? ida_alloc_range+0x654/0x830 [ 322.808513][T11489] kmalloc_trace+0x2a/0xe0 [ 322.812955][T11489] ida_alloc_range+0x654/0x830 [ 322.817762][T11489] ? __xdp_reg_mem_model+0x1ef/0x5a0 [ 322.823065][T11489] ? idr_replace+0x1a0/0x1a0 [ 322.827690][T11489] __xdp_reg_mem_model+0x20b/0x5a0 [ 322.832820][T11489] ? kvmalloc_node+0x70/0x180 [ 322.837517][T11489] ? xdp_reg_mem_model+0x40/0x40 [ 322.842484][T11489] xdp_reg_mem_model+0x22/0x40 [ 322.847269][T11489] bpf_test_run_xdp_live+0x20c/0x1a20 [ 322.852657][T11489] ? 0xffffffffa0004740 [ 322.856823][T11489] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 322.862741][T11489] ? __sys_bpf+0x440/0x800 [ 322.867172][T11489] ? __x64_sys_bpf+0x7c/0x90 [ 322.871773][T11489] ? do_syscall_64+0x55/0xb0 [ 322.876387][T11489] ? xdp_convert_md_to_buff+0x330/0x330 [ 322.881978][T11489] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 322.888237][T11489] ? _copy_from_user+0xa5/0xe0 [ 322.893015][T11489] ? bpf_test_init+0x134/0x150 [ 322.897789][T11489] ? xdp_convert_md_to_buff+0x5b/0x330 [ 322.903268][T11489] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 322.908610][T11489] ? dev_put+0x80/0x80 [ 322.912705][T11489] ? dev_put+0x80/0x80 [ 322.916801][T11489] bpf_prog_test_run+0x321/0x390 [ 322.921771][T11489] __sys_bpf+0x440/0x800 [ 322.926037][T11489] ? bpf_link_show_fdinfo+0x350/0x350 [ 322.931441][T11489] ? lock_chain_count+0x20/0x20 [ 322.936301][T11489] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 322.942306][T11489] __x64_sys_bpf+0x7c/0x90 [ 322.946737][T11489] do_syscall_64+0x55/0xb0 [ 322.951214][T11489] ? clear_bhb_loop+0x40/0x90 [ 322.955911][T11489] ? clear_bhb_loop+0x40/0x90 [ 322.960601][T11489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.966510][T11489] RIP: 0033:0x7f83fe18f749 [ 322.970948][T11489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.990569][T11489] RSP: 002b:00007f83fc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.999022][T11489] RAX: ffffffffffffffda RBX: 00007f83fe3e5fa0 RCX: 00007f83fe18f749 [ 323.007017][T11489] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 323.015000][T11489] RBP: 00007f83fc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.022988][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.030974][T11489] R13: 00007f83fe3e6038 R14: 00007f83fe3e5fa0 R15: 00007ffe76424ac8 [ 323.039015][T11489] [ 323.058414][T11494] netlink: 'syz.1.1752': attribute type 13 has an invalid length. [ 323.067590][T11494] netlink: 'syz.1.1752': attribute type 58 has an invalid length. [ 323.075616][T11494] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1752'. [ 323.399028][T11503] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1756'. [ 323.704266][T11517] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1762'. [ 323.797359][T11519] netlink: 'syz.0.1763': attribute type 13 has an invalid length. [ 323.809234][T11519] netlink: 'syz.0.1763': attribute type 58 has an invalid length. [ 323.820412][T11519] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1763'. [ 323.852301][T11517] netlink: 'syz.1.1762': attribute type 10 has an invalid length. [ 323.895629][T11517] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 324.874453][T11544] netlink: 'syz.3.1771': attribute type 2 has an invalid length. [ 324.910490][T11544] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1771'. [ 324.967725][T11552] FAULT_INJECTION: forcing a failure. [ 324.967725][T11552] name failslab, interval 1, probability 0, space 0, times 0 [ 324.989720][T11552] CPU: 1 PID: 11552 Comm: syz.2.1773 Not tainted syzkaller #0 [ 324.997345][T11552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.007434][T11552] Call Trace: [ 325.010756][T11552] [ 325.013714][T11552] dump_stack_lvl+0x16c/0x230 [ 325.018453][T11552] ? show_regs_print_info+0x20/0x20 [ 325.023696][T11552] ? load_image+0x3b0/0x3b0 [ 325.028237][T11552] ? lockdep_hardirqs_on+0x98/0x150 [ 325.033473][T11552] ? verify_lock_unused+0x140/0x140 [ 325.038712][T11552] should_fail_ex+0x39d/0x4d0 [ 325.043444][T11552] should_failslab+0x9/0x20 [ 325.047995][T11552] slab_pre_alloc_hook+0x59/0x310 [ 325.053075][T11552] kmem_cache_alloc+0x5a/0x2e0 [ 325.057879][T11552] ? skb_clone+0x1eb/0x370 [ 325.062343][T11552] skb_clone+0x1eb/0x370 [ 325.066635][T11552] __netlink_deliver_tap+0x41c/0x830 [ 325.071981][T11552] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.077217][T11552] netlink_deliver_tap+0x19c/0x1b0 [ 325.082377][T11552] netlink_sendskb+0x68/0x130 [ 325.087112][T11552] netlink_ack+0xc7e/0x1110 [ 325.091679][T11552] ? netlink_dump+0xde0/0xde0 [ 325.096416][T11552] ? ref_tracker_free+0x634/0x7d0 [ 325.101491][T11552] netlink_rcv_skb+0x29a/0x480 [ 325.106297][T11552] ? genl_bind+0x360/0x360 [ 325.110766][T11552] ? netlink_ack+0x1110/0x1110 [ 325.115588][T11552] ? __lock_acquire+0x7c80/0x7c80 [ 325.120649][T11552] ? down_read+0x1ac/0x2e0 [ 325.125118][T11552] genl_rcv+0x28/0x40 [ 325.129129][T11552] netlink_unicast+0x751/0x8d0 [ 325.133937][T11552] netlink_sendmsg+0x8c1/0xbe0 [ 325.138750][T11552] ? netlink_getsockopt+0x580/0x580 [ 325.143969][T11552] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 325.149985][T11552] ? aa_sock_msg_perm+0x94/0x150 [ 325.154954][T11552] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 325.160261][T11552] ? security_socket_sendmsg+0x80/0xa0 [ 325.165761][T11552] ? netlink_getsockopt+0x580/0x580 [ 325.171005][T11552] ____sys_sendmsg+0x5bf/0x950 [ 325.175797][T11552] ? __asan_memset+0x22/0x40 [ 325.180411][T11552] ? __sys_sendmsg_sock+0x30/0x30 [ 325.185453][T11552] ? __import_iovec+0x5f2/0x860 [ 325.190329][T11552] ? __import_iovec+0x5/0x860 [ 325.195029][T11552] ? import_iovec+0x73/0xa0 [ 325.199580][T11552] ___sys_sendmsg+0x220/0x290 [ 325.204286][T11552] ? __sys_sendmsg+0x270/0x270 [ 325.209131][T11552] __se_sys_sendmsg+0x1a5/0x270 [ 325.214015][T11552] ? __x64_sys_sendmsg+0x80/0x80 [ 325.218994][T11552] ? lockdep_hardirqs_on+0x98/0x150 [ 325.224221][T11552] ? __x64_sys_sendmsg+0x1d/0x80 [ 325.229195][T11552] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 325.234792][T11552] do_syscall_64+0x55/0xb0 [ 325.239235][T11552] ? clear_bhb_loop+0x40/0x90 [ 325.243934][T11552] ? clear_bhb_loop+0x40/0x90 [ 325.248629][T11552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.254548][T11552] RIP: 0033:0x7f83fe18f749 [ 325.258975][T11552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.278632][T11552] RSP: 002b:00007f83fc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.287074][T11552] RAX: ffffffffffffffda RBX: 00007f83fe3e5fa0 RCX: 00007f83fe18f749 [ 325.295060][T11552] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 325.303043][T11552] RBP: 00007f83fc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.311032][T11552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.319028][T11552] R13: 00007f83fe3e6038 R14: 00007f83fe3e5fa0 R15: 00007ffe76424ac8 [ 325.327056][T11552] [ 325.381723][T11558] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1776'. [ 325.397151][T11559] FAULT_INJECTION: forcing a failure. [ 325.397151][T11559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.414371][T11559] CPU: 1 PID: 11559 Comm: syz.3.1775 Not tainted syzkaller #0 [ 325.421880][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.431942][T11559] Call Trace: [ 325.435225][T11559] [ 325.438159][T11559] dump_stack_lvl+0x16c/0x230 [ 325.442850][T11559] ? show_regs_print_info+0x20/0x20 [ 325.448056][T11559] ? load_image+0x3b0/0x3b0 [ 325.452566][T11559] ? __might_fault+0xaa/0x120 [ 325.457249][T11559] ? __lock_acquire+0x7c80/0x7c80 [ 325.462321][T11559] should_fail_ex+0x39d/0x4d0 [ 325.467017][T11559] _copy_to_user+0x2f/0xa0 [ 325.471443][T11559] bpf_test_finish+0x19a/0x620 [ 325.476221][T11559] ? convert_skb_to___skb+0x420/0x420 [ 325.481601][T11559] ? _copy_from_user+0xa5/0xe0 [ 325.486380][T11559] ? bpf_test_init+0x134/0x150 [ 325.491149][T11559] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 325.496444][T11559] ? lockdep_hardirqs_on+0x98/0x150 [ 325.501650][T11559] ? dev_put+0x80/0x80 [ 325.505739][T11559] ? dev_put+0x80/0x80 [ 325.509809][T11559] bpf_prog_test_run+0x321/0x390 [ 325.514756][T11559] __sys_bpf+0x440/0x800 [ 325.519018][T11559] ? bpf_link_show_fdinfo+0x350/0x350 [ 325.524412][T11559] ? lock_chain_count+0x20/0x20 [ 325.529267][T11559] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 325.535281][T11559] __x64_sys_bpf+0x7c/0x90 [ 325.539711][T11559] do_syscall_64+0x55/0xb0 [ 325.544151][T11559] ? clear_bhb_loop+0x40/0x90 [ 325.548840][T11559] ? clear_bhb_loop+0x40/0x90 [ 325.553523][T11559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.559423][T11559] RIP: 0033:0x7f4287f8f749 [ 325.563846][T11559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.583457][T11559] RSP: 002b:00007f42861f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.591891][T11559] RAX: ffffffffffffffda RBX: 00007f42881e6090 RCX: 00007f4287f8f749 [ 325.599868][T11559] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 325.607844][T11559] RBP: 00007f42861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.615819][T11559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.623791][T11559] R13: 00007f42881e6128 R14: 00007f42881e6090 R15: 00007ffe34e75d58 [ 325.631796][T11559] [ 325.724451][T11563] FAULT_INJECTION: forcing a failure. [ 325.724451][T11563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.768287][T11563] CPU: 0 PID: 11563 Comm: syz.1.1785 Not tainted syzkaller #0 [ 325.775923][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.786014][T11563] Call Trace: [ 325.789319][T11563] [ 325.792284][T11563] dump_stack_lvl+0x16c/0x230 [ 325.797013][T11563] ? show_regs_print_info+0x20/0x20 [ 325.802271][T11563] ? load_image+0x3b0/0x3b0 [ 325.806809][T11563] ? __lock_acquire+0x7c80/0x7c80 [ 325.811873][T11563] ? snprintf+0xdb/0x120 [ 325.816146][T11563] should_fail_ex+0x39d/0x4d0 [ 325.820860][T11563] _copy_to_user+0x2f/0xa0 [ 325.825303][T11563] simple_read_from_buffer+0xe7/0x150 [ 325.830712][T11563] proc_fail_nth_read+0x1e3/0x250 [ 325.835774][T11563] ? proc_fault_inject_write+0x340/0x340 [ 325.841435][T11563] ? fsnotify_perm+0x271/0x5e0 [ 325.846222][T11563] ? proc_fault_inject_write+0x340/0x340 [ 325.851880][T11563] vfs_read+0x27e/0x920 [ 325.856065][T11563] ? kernel_read+0x1e0/0x1e0 [ 325.860695][T11563] ? __fget_files+0x28/0x4d0 [ 325.865314][T11563] ? __fget_files+0x44a/0x4d0 [ 325.870023][T11563] ? __fdget_pos+0x2a3/0x330 [ 325.874637][T11563] ? ksys_read+0x75/0x250 [ 325.879029][T11563] ksys_read+0x147/0x250 [ 325.883321][T11563] ? vfs_write+0x940/0x940 [ 325.887760][T11563] ? lockdep_hardirqs_on+0x98/0x150 [ 325.892975][T11563] do_syscall_64+0x55/0xb0 [ 325.897411][T11563] ? clear_bhb_loop+0x40/0x90 [ 325.902108][T11563] ? clear_bhb_loop+0x40/0x90 [ 325.906809][T11563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.912732][T11563] RIP: 0033:0x7fcc04d8e15c [ 325.917162][T11563] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 325.936788][T11563] RSP: 002b:00007fcc05b4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.945220][T11563] RAX: ffffffffffffffda RBX: 00007fcc04fe5fa0 RCX: 00007fcc04d8e15c [ 325.953212][T11563] RDX: 000000000000000f RSI: 00007fcc05b4c0a0 RDI: 0000000000000007 [ 325.961207][T11563] RBP: 00007fcc05b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 325.969204][T11563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.977191][T11563] R13: 00007fcc04fe6038 R14: 00007fcc04fe5fa0 R15: 00007fff1d4b94d8 [ 325.985190][T11563] [ 326.092982][T11565] validate_nla: 1 callbacks suppressed [ 326.093009][T11565] netlink: 'syz.2.1777': attribute type 13 has an invalid length. [ 326.110072][T11565] netlink: 'syz.2.1777': attribute type 58 has an invalid length. [ 326.801537][T11593] FAULT_INJECTION: forcing a failure. [ 326.801537][T11593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.831051][T11593] CPU: 1 PID: 11593 Comm: syz.2.1788 Not tainted syzkaller #0 [ 326.838582][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.848672][T11593] Call Trace: [ 326.851979][T11593] [ 326.854933][T11593] dump_stack_lvl+0x16c/0x230 [ 326.859642][T11593] ? show_regs_print_info+0x20/0x20 [ 326.864880][T11593] ? load_image+0x3b0/0x3b0 [ 326.869411][T11593] ? __might_fault+0xaa/0x120 [ 326.874113][T11593] ? __lock_acquire+0x7c80/0x7c80 [ 326.879171][T11593] should_fail_ex+0x39d/0x4d0 [ 326.883881][T11593] _copy_to_user+0x2f/0xa0 [ 326.888323][T11593] bpf_test_finish+0x24b/0x620 [ 326.893140][T11593] ? convert_skb_to___skb+0x420/0x420 [ 326.898543][T11593] ? _copy_from_user+0xa5/0xe0 [ 326.903344][T11593] ? bpf_test_init+0x134/0x150 [ 326.908140][T11593] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 326.913462][T11593] ? dev_put+0x80/0x80 [ 326.917580][T11593] ? dev_put+0x80/0x80 [ 326.921681][T11593] bpf_prog_test_run+0x321/0x390 [ 326.926650][T11593] __sys_bpf+0x440/0x800 [ 326.930913][T11593] ? bpf_link_show_fdinfo+0x350/0x350 [ 326.936297][T11593] ? lock_chain_count+0x20/0x20 [ 326.941158][T11593] __x64_sys_bpf+0x7c/0x90 [ 326.945576][T11593] do_syscall_64+0x55/0xb0 [ 326.950005][T11593] ? clear_bhb_loop+0x40/0x90 [ 326.954706][T11593] ? clear_bhb_loop+0x40/0x90 [ 326.959394][T11593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.965293][T11593] RIP: 0033:0x7f83fe18f749 [ 326.969715][T11593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.989331][T11593] RSP: 002b:00007f83fc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.997761][T11593] RAX: ffffffffffffffda RBX: 00007f83fe3e5fa0 RCX: 00007f83fe18f749 [ 327.005753][T11593] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 327.013737][T11593] RBP: 00007f83fc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.021717][T11593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.029689][T11593] R13: 00007f83fe3e6038 R14: 00007f83fe3e5fa0 R15: 00007ffe76424ac8 [ 327.037678][T11593] [ 327.547844][T11605] netlink: 'syz.3.1792': attribute type 13 has an invalid length. [ 327.557457][T11605] netlink: 'syz.3.1792': attribute type 58 has an invalid length. [ 327.567872][T11605] __nla_validate_parse: 2 callbacks suppressed [ 327.567914][T11605] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1792'. [ 327.858845][T11609] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 327.931699][T11609] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 328.272929][T11609] netlink: 'syz.2.1794': attribute type 29 has an invalid length. [ 328.430510][T11626] netlink: 'syz.1.1798': attribute type 10 has an invalid length. [ 328.438928][T11626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1798'. [ 328.450415][T11626] dummy0: entered promiscuous mode [ 328.457764][T11626] dummy0: entered allmulticast mode [ 328.467471][T11626] bond0: (slave dummy0): Releasing backup interface [ 328.486757][T11626] bridge0: port 3(dummy0) entered blocking state [ 328.500384][T11626] bridge0: port 3(dummy0) entered disabled state [ 328.677248][T11631] FAULT_INJECTION: forcing a failure. [ 328.677248][T11631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.691818][T11631] CPU: 1 PID: 11631 Comm: syz.2.1799 Not tainted syzkaller #0 [ 328.699314][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.709385][T11631] Call Trace: [ 328.712703][T11631] [ 328.715633][T11631] dump_stack_lvl+0x16c/0x230 [ 328.720331][T11631] ? show_regs_print_info+0x20/0x20 [ 328.725535][T11631] ? load_image+0x3b0/0x3b0 [ 328.730036][T11631] ? __might_fault+0xaa/0x120 [ 328.734732][T11631] ? __lock_acquire+0x7c80/0x7c80 [ 328.739775][T11631] should_fail_ex+0x39d/0x4d0 [ 328.744472][T11631] _copy_to_user+0x2f/0xa0 [ 328.748897][T11631] bpf_test_finish+0x24b/0x620 [ 328.753680][T11631] ? convert_skb_to___skb+0x420/0x420 [ 328.759063][T11631] ? _copy_from_user+0xa5/0xe0 [ 328.763834][T11631] ? bpf_test_init+0x134/0x150 [ 328.768605][T11631] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 328.773945][T11631] ? dev_put+0x80/0x80 [ 328.778084][T11631] ? dev_put+0x80/0x80 [ 328.782154][T11631] bpf_prog_test_run+0x321/0x390 [ 328.787091][T11631] __sys_bpf+0x440/0x800 [ 328.791330][T11631] ? bpf_link_show_fdinfo+0x350/0x350 [ 328.796700][T11631] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.802860][T11631] __x64_sys_bpf+0x7c/0x90 [ 328.807271][T11631] do_syscall_64+0x55/0xb0 [ 328.811688][T11631] ? clear_bhb_loop+0x40/0x90 [ 328.816356][T11631] ? clear_bhb_loop+0x40/0x90 [ 328.821033][T11631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.826924][T11631] RIP: 0033:0x7f83fe18f749 [ 328.831332][T11631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.850959][T11631] RSP: 002b:00007f83fc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 328.859396][T11631] RAX: ffffffffffffffda RBX: 00007f83fe3e5fa0 RCX: 00007f83fe18f749 [ 328.867390][T11631] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 328.875363][T11631] RBP: 00007f83fc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 328.883329][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.891312][T11631] R13: 00007f83fe3e6038 R14: 00007f83fe3e5fa0 R15: 00007ffe76424ac8 [ 328.899298][T11631] [ 329.128461][T11637] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1803'. [ 329.446905][T11647] netlink: 'syz.2.1807': attribute type 13 has an invalid length. [ 329.458472][T11647] netlink: 'syz.2.1807': attribute type 58 has an invalid length. [ 329.480783][T11647] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1807'. [ 329.696840][T11661] FAULT_INJECTION: forcing a failure. [ 329.696840][T11661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.734831][T11661] CPU: 0 PID: 11661 Comm: syz.0.1811 Not tainted syzkaller #0 [ 329.742360][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 329.752458][T11661] Call Trace: [ 329.755820][T11661] [ 329.758758][T11661] dump_stack_lvl+0x16c/0x230 [ 329.763455][T11661] ? show_regs_print_info+0x20/0x20 [ 329.768669][T11661] ? load_image+0x3b0/0x3b0 [ 329.773187][T11661] ? __lock_acquire+0x7c80/0x7c80 [ 329.778237][T11661] ? snprintf+0xdb/0x120 [ 329.782493][T11661] should_fail_ex+0x39d/0x4d0 [ 329.787187][T11661] _copy_to_user+0x2f/0xa0 [ 329.791611][T11661] simple_read_from_buffer+0xe7/0x150 [ 329.796998][T11661] proc_fail_nth_read+0x1e3/0x250 [ 329.802049][T11661] ? proc_fault_inject_write+0x340/0x340 [ 329.807689][T11661] ? fsnotify_perm+0x271/0x5e0 [ 329.812461][T11661] ? proc_fault_inject_write+0x340/0x340 [ 329.818095][T11661] vfs_read+0x27e/0x920 [ 329.822260][T11661] ? kernel_read+0x1e0/0x1e0 [ 329.826863][T11661] ? __fget_files+0x28/0x4d0 [ 329.831488][T11661] ? __fget_files+0x44a/0x4d0 [ 329.836180][T11661] ? __fdget_pos+0x2a3/0x330 [ 329.840779][T11661] ? ksys_read+0x75/0x250 [ 329.845141][T11661] ksys_read+0x147/0x250 [ 329.849394][T11661] ? vfs_write+0x940/0x940 [ 329.853843][T11661] ? syscall_enter_from_user_mode+0x2e/0x80 [ 329.859748][T11661] do_syscall_64+0x55/0xb0 [ 329.864204][T11661] ? clear_bhb_loop+0x40/0x90 [ 329.868879][T11661] ? clear_bhb_loop+0x40/0x90 [ 329.873560][T11661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.879456][T11661] RIP: 0033:0x7f0b22f8e15c [ 329.883895][T11661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 329.903503][T11661] RSP: 002b:00007f0b23f14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.911917][T11661] RAX: ffffffffffffffda RBX: 00007f0b231e5fa0 RCX: 00007f0b22f8e15c [ 329.919908][T11661] RDX: 000000000000000f RSI: 00007f0b23f140a0 RDI: 0000000000000006 [ 329.927899][T11661] RBP: 00007f0b23f14090 R08: 0000000000000000 R09: 0000000000000000 [ 329.935903][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.943882][T11661] R13: 00007f0b231e6038 R14: 00007f0b231e5fa0 R15: 00007ffe135cc618 [ 329.951875][T11661] [ 330.274569][T11674] [ 330.277328][T11674] ============================= [ 330.282432][T11674] WARNING: suspicious RCU usage [ 330.287342][T11674] syzkaller #0 Not tainted [ 330.291923][T11674] ----------------------------- [ 330.296811][T11674] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 330.305397][T11674] [ 330.305397][T11674] other info that might help us debug this: [ 330.305397][T11674] [ 330.315867][T11674] [ 330.315867][T11674] rcu_scheduler_active = 2, debug_locks = 1 [ 330.324733][T11674] 1 lock held by syz.3.1816/11674: [ 330.330230][T11674] #0: ffffffff8cd300c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 330.341004][T11674] [ 330.341004][T11674] stack backtrace: [ 330.346951][T11674] CPU: 1 PID: 11674 Comm: syz.3.1816 Not tainted syzkaller #0 [ 330.354441][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.364537][T11674] Call Trace: [ 330.367847][T11674] [ 330.370802][T11674] dump_stack_lvl+0x16c/0x230 [ 330.375515][T11674] ? show_regs_print_info+0x20/0x20 [ 330.380756][T11674] ? load_image+0x3b0/0x3b0 [ 330.385321][T11674] ? __lock_acquire+0x1260/0x7c80 [ 330.390420][T11674] lockdep_rcu_suspicious+0x1e1/0x300 [ 330.395835][T11674] get_callchain_entry+0x2a9/0x3c0 [ 330.400976][T11674] get_perf_callchain+0xbc/0x4d0 [ 330.405941][T11674] ? verify_lock_unused+0x140/0x140 [ 330.411170][T11674] ? put_callchain_entry+0xb0/0xb0 [ 330.416302][T11674] ? perf_trace_lock+0x2ed/0x380 [ 330.421296][T11674] __bpf_get_stack+0x2d7/0x510 [ 330.426106][T11674] ? stack_map_get_build_id_offset+0x720/0x720 [ 330.432306][T11674] ? __cant_sleep+0x210/0x210 [ 330.437029][T11674] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 330.442709][T11674] bpf_get_stack_raw_tp+0x1a9/0x210 [ 330.447959][T11674] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 330.453466][T11674] bpf_prog_run_pin_on_cpu+0xa8/0x140 [ 330.458888][T11674] bpf_prog_test_run_syscall+0x311/0x490 [ 330.464558][T11674] ? sock_gen_cookie+0x60/0x60 [ 330.469359][T11674] ? sock_gen_cookie+0x60/0x60 [ 330.474143][T11674] bpf_prog_test_run+0x321/0x390 [ 330.479110][T11674] __sys_bpf+0x440/0x800 [ 330.483382][T11674] ? bpf_link_show_fdinfo+0x350/0x350 [ 330.488793][T11674] ? lock_chain_count+0x20/0x20 [ 330.493679][T11674] __x64_sys_bpf+0x7c/0x90 [ 330.498103][T11674] do_syscall_64+0x55/0xb0 [ 330.502535][T11674] ? clear_bhb_loop+0x40/0x90 [ 330.507224][T11674] ? clear_bhb_loop+0x40/0x90 [ 330.511916][T11674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.517818][T11674] RIP: 0033:0x7f4287f8f749 [ 330.522249][T11674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.541870][T11674] RSP: 002b:00007f4288d5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.550306][T11674] RAX: ffffffffffffffda RBX: 00007f42881e5fa0 RCX: 00007f4287f8f749 [ 330.558301][T11674] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 330.566288][T11674] RBP: 00007f4288013f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.574290][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.582288][T11674] R13: 00007f42881e6038 R14: 00007f42881e5fa0 R15: 00007ffe34e75d58 [ 330.590314][T11674]